{"schema":2,"kev":{"url":"https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json","fetchedAt":"2026-11-01T01:26:08.063Z","sha256":"3aa9cf3c01f116362a29d111702979175453c425e3733bde80fc4f6f8e2294e5","catalogVersion":"2026.10.30","dateReleased":"2026-10-30T17:02:45.3665Z","count":1766,"records":[{"cveID":"CVE-2026-118527","vendorProject":"Ivanti","product":"Connect Secure","vulnerabilityName":"Ivanti Connect Secure Generation of Predictable Numbers or Identifiers Vulnerability","dateAdded":"2026-10-30","dueDate":"2026-11-13","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-118527"},{"cveID":"CVE-2026-111357","vendorProject":"Ivanti","product":"Connect Secure","vulnerabilityName":"Ivanti Connect Secure Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-10-30","dueDate":"2026-11-02","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935?language=en_US ; https://www.cisa.gov/news-events/alerts/2026/10/13/cisa-urges-patching-newly-exploited-vulnerability-ivanti-connect-secure ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111357"},{"cveID":"CVE-2026-97229","vendorProject":"GitLab","product":"Community Edition and Enterprise Edition","vulnerabilityName":"GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability","dateAdded":"2026-10-29","dueDate":"2026-11-01","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"Other products can potentially be affected by the same underlying Ruby/Onigmo Integer Overflow issue in CI/CD Regular Expression Compiler. For more information please see: https://www.ruby-lang.org/en/news/2026/10/23/regexp-fixes-for-gitlab-cves ; https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-97229"},{"cveID":"CVE-2026-76418","vendorProject":"Cisco","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","vulnerabilityName":"Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability","dateAdded":"2026-10-29","dueDate":"2026-11-01","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-tunnel-dos-s6mgkb75 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76418"},{"cveID":"CVE-2026-41709","vendorProject":"Broadcom","product":"VMware ESX","vulnerabilityName":"Broadcom VMWare ESX Insufficient Logging Vulnerability","dateAdded":"2026-10-28","dueDate":"2026-11-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-41709"},{"cveID":"CVE-2026-46300","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Missing Initialization of a Variable Vulnerability","dateAdded":"2026-10-28","dueDate":"2026-10-31","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/3599e6b3cc1ada96883d496a50a210d3afbb6987 ; https://git.kernel.org/stable/c/2f2b16022a2e10ca7bccfb98db5ed2ec0f72641c ; https://git.kernel.org/stable/c/9d3e5fd19fe1063bf607219e8562fbd567b8e8d5 ; https://git.kernel.org/stable/c/78bf6b6bb19541d19fbda6242e7cfe2c682763c0 ; https://git.kernel.org/stable/c/760e1addc27ba1a7beb4a0a7e8b3e9ec49e7a34e ; https://git.kernel.org/stable/c/3bd9e113d50034db99d7ef69fd8e5242d15e414a ; https://git.kernel.org/stable/c/3884358a9286b17f389a72b1426fc4547c23c111 ; https://git.kernel.org/stable/c/f84eca5817390257cef78013d0112481c503b4a3 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46300"},{"cveID":"CVE-2026-48356","vendorProject":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-10-27","dueDate":"2026-11-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.adobe.com/trust/security/products/commerce/apsb26-73.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48356"},{"cveID":"CVE-2026-111497","vendorProject":"Google","product":"Brotli","vulnerabilityName":"Google Brotli Unchecked Return Value Vulnerability","dateAdded":"2026-10-27","dueDate":"2026-11-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/google/brotli/releases/tag/v1.2.1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-111497"},{"cveID":"CVE-2026-109618","vendorProject":"PHP Group","product":"PHP","vulnerabilityName":"PHP Memory Corruption Vulnerability","dateAdded":"2026-10-26","dueDate":"2026-10-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.php.net/ ; https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ;  https://nvd.nist.gov/vuln/detail/CVE-2026-109618"},{"cveID":"CVE-2026-109619","vendorProject":"PHP Group","product":"PHP","vulnerabilityName":"PHP Stale Internal Request-State Vulnerability","dateAdded":"2026-10-26","dueDate":"2026-10-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.php.net/ ; https://www.cisa.gov/news-events/alerts/2026/10/21/critical-vulnerabilities-php-require-immediate-patching ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ;  https://nvd.nist.gov/vuln/detail/CVE-2026-109619"},{"cveID":"CVE-2026-114625","vendorProject":"Arista","product":"VeloCloud Orchestrator","vulnerabilityName":"Arista VeloCloud Orchestrator SQL Injection Vulnerability","dateAdded":"2026-10-23","dueDate":"2026-10-26","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.arista.com/en/support/advisories-notices/security-advisory/24838-security-advisory-0199 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-114625"},{"cveID":"CVE-2026-110447","vendorProject":"Collabora","product":"Collabora Online – Built-in CODE Server","vulnerabilityName":"Collabora Online – Built-in CODE Server OS Command Injection Vulnerability","dateAdded":"2026-10-23","dueDate":"2026-10-26","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://help.nextcloud.com/t/to-collabora-built-in-user-update-asap/250516 ; https://github.com/CollaboraOnline/online/security/advisories/GHSA-g3vx-3m76-fghh ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-110447"},{"cveID":"CVE-2026-106931","vendorProject":"EG Secure Solutions","product":"SiteGuard Server Edition","vulnerabilityName":"EG Secure Solutions SiteGuard Server Edition OS Command Injection Vulnerability","dateAdded":"2026-10-20","dueDate":"2026-10-23","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.eg-secure.co.jp/siteguard/news/alert-202610-1 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-106931"},{"cveID":"CVE-2026-96656","vendorProject":"Plex","product":"Media Server","vulnerabilityName":"Plex Media Server External Control of File Name or Path Vulnerability","dateAdded":"2026-10-20","dueDate":"2026-10-23","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-96656"},{"cveID":"CVE-2026-96655","vendorProject":"Plex","product":"Media Server","vulnerabilityName":"Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-10-20","dueDate":"2026-11-03","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-96655"},{"cveID":"CVE-2026-96654","vendorProject":"Plex","product":"Media Server","vulnerabilityName":"Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability","dateAdded":"2026-10-20","dueDate":"2026-10-23","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-96654"},{"cveID":"CVE-2026-96652","vendorProject":"Plex","product":"Media Server","vulnerabilityName":"Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-10-20","dueDate":"2026-11-03","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://forums.plex.tv/t/important-security-update-for-plex-media-server-v1-43-2-and-earlier/942319 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-96652"},{"cveID":"CVE-2026-110936","vendorProject":"Siemens","product":"Software Center","vulnerabilityName":"Siemens Software Center Uncontrolled Search Path Element Vulnerability","dateAdded":"2026-10-20","dueDate":"2026-11-03","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://productcert.siemens.com/productcert/html/ssa-580366.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-110936"},{"cveID":"CVE-2026-102764","vendorProject":"BeyondTrust","product":"Remote Support","vulnerabilityName":"BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability","dateAdded":"2026-10-16","dueDate":"2026-10-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.beyondtrust.com/trust-center/security-advisories/bt26-05 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-102764"},{"cveID":"CVE-2025-61624","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Path Traversal Vulnerability","dateAdded":"2026-10-16","dueDate":"2026-10-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-26-122 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-61624"},{"cveID":"CVE-2026-21589","vendorProject":"Atlassian","product":"Multiple Products","vulnerabilityName":"Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability","dateAdded":"2026-10-15","dueDate":"2026-10-18","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://confluence.atlassian.com/security/cve-2026-21589-arbitrary-file-access-vulnerability-impacts-multiple-products-1870495748.html?ref=labs.watchtowr.com ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-21589"},{"cveID":"CVE-2026-105134","vendorProject":"Ahsay","product":"AhsayCBS","vulnerabilityName":"Ahsay AhsayCBS Command Injection Vulnerability","dateAdded":"2026-10-14","dueDate":"2026-10-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105134"},{"cveID":"CVE-2026-76519","vendorProject":"Cisco","product":"Secure Email Gateway","vulnerabilityName":"Cisco Secure Email Gateway Relative Path Traversal Vulnerability","dateAdded":"2026-10-14","dueDate":"2026-10-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-afw-zqYJkjxp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76519"},{"cveID":"CVE-2026-105133","vendorProject":"Ahsay","product":"AhsayCBS","vulnerabilityName":"Ahsay AhsayCBS Improper Authentication Vulnerability","dateAdded":"2026-10-14","dueDate":"2026-10-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.ahsay.com/en/company/announcements/patch-cve-105133-105134-update ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-105133"},{"cveID":"CVE-2026-0322","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Code Injection Vulnerability","dateAdded":"2026-10-14","dueDate":"2026-10-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://security.paloaltonetworks.com/CVE-2026-0322 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0322"},{"cveID":"CVE-2026-104935","vendorProject":"Ivanti","product":"Connect Secure","vulnerabilityName":"Ivanti Connect Secure Authentication Bypass by Spoofing Vulnerability","dateAdded":"2026-10-13","dueDate":"2026-10-16","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https:/forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-CVE-2026-104935 ; https://nvd.nist.gov/vuln/detail/CVE-2026-104935"},{"cveID":"CVE-2026-96951","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Command Injection Vulnerability","dateAdded":"2026-10-13","dueDate":"2026-10-16","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-96951 ; BOD 26-04: BOD 26-04: Prioritizing Security Updates Based on Risk | CISA ; Forensics Triage Requirements: BOD 26-04: Implementation Guidance for Prioritizing Security Updates Based on Risk | CISA ;  https://nvd.nist.gov/vuln/detail/CVE-2026-96951"},{"cveID":"CVE-2015-5477","vendorProject":"ISC","product":"BIND","vulnerabilityName":" ISC BIND Data Processing Errors Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272 ; https://access.redhat.com/errata/RHSA-2015:1513.html; https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5477"},{"cveID":"CVE-2016-3081","vendorProject":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Command Injection Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cwiki.apache.org/confluence/display/WW/S2-032 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2016-3081"},{"cveID":"CVE-2023-22894","vendorProject":"Strapi","product":"Strapi","vulnerabilityName":"Strapi Cleartext Storage of Sensitive Information Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve ; https://github.com/strapi/strapi/releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-22894"},{"cveID":"CVE-2021-3199","vendorProject":"ONLYOFFICE","product":"Docs","vulnerabilityName":"ONLYOFFICE Docs Server Path Traversal Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-3199"},{"cveID":"CVE-2015-3306","vendorProject":"ProFTPD","product":"ProFTPD","vulnerabilityName":"ProFTPD Improper Access Control Vulnerability","dateAdded":"2026-10-08","dueDate":"2026-10-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306"},{"cveID":"CVE-2026-88779","vendorProject":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","dateAdded":"2026-10-04","dueDate":"2026-10-07","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697174 ; https://community.citrix.com/techzone-blogs/110_security-updates/understanding-and-addressing-cve-2026-88779-in-citrix-netscaler-adc-and-citrix-netscaler-gateway/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88779"},{"cveID":"CVE-2026-102490","vendorProject":"Zammad GmbH","product":"Zammad","vulnerabilityName":"Zammad GmbH Zammad Improper Privilege Management Vulnerability","dateAdded":"2026-10-02","dueDate":"2026-10-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://zammad.com/en/product/releases/ ; https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-102490"},{"cveID":"CVE-2026-102489","vendorProject":"Zammad GmbH","product":"Zammad","vulnerabilityName":"Zammad GmbH Zammad Session Fixation Vulnerability","dateAdded":"2026-10-02","dueDate":"2026-10-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://zammad.com/en/product/releases/ ; https://community.zammad.org/t/take-care-local-privilege-escalation-cve-2026-102490-is-reported-as-being-actively-exploited/21297/2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-102489"},{"cveID":"CVE-2026-104286","vendorProject":"Fortinet","product":"FortiMail","vulnerabilityName":"Fortinet FortiMail Path Traversal Vulnerability","dateAdded":"2026-10-01","dueDate":"2026-10-04","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-26-175 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-104286"},{"cveID":"CVE-2026-76504","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability","dateAdded":"2026-09-30","dueDate":"2026-10-03","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-webauth-xr8beuuU ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76504"},{"cveID":"CVE-2026-86950","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Out-of-Bounds Write Vulnerability","dateAdded":"2026-09-29","dueDate":"2026-10-13","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.apple.com/en-us/149226 ; https://support.apple.com/en-us/149228 ; https://support.apple.com/en-us/149229 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86950"},{"cveID":"CVE-2026-88772","vendorProject":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","dateAdded":"2026-09-27","dueDate":"2026-09-30","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"Running the provided IOCs in the NetScaler console may help identify indicators of exploitation. Customers must conduct forensic triage as directed by BOD 26‑04 and follow Citrix’s published guidance for mitigations. For more information, please see: https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778 ; https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 ; https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88772"},{"cveID":"CVE-2026-88771","vendorProject":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Improper Input Validation Vulnerability","dateAdded":"2026-09-27","dueDate":"2026-09-30","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"Running the provided IOCs in the NetScaler console may help identify indicators of exploitation. Customers must conduct forensic triage as directed by BOD 26‑04 and follow Citrix’s published guidance for mitigations. For more information, please see: https://community.citrix.com/techzone-blogs/110_security-updates/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve-2026-88771-through-cve-2026-88778 ; https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 ; https://support.citrix.com/external/article/CTX694799/steps-to-take-if-netscaler-adc-is-suspec.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-88772"},{"cveID":"CVE-2026-67279","vendorProject":"MikroTik","product":"RouterOS","vulnerabilityName":"Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability","dateAdded":"2026-09-25","dueDate":"2026-09-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://mikrotik.com/supportsec/september-2026-vulnerability ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-67279"},{"cveID":"CVE-2026-65660","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Code Injection Vulnerability","dateAdded":"2026-09-25","dueDate":"2026-09-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65660 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-65660"},{"cveID":"CVE-2026-87902","vendorProject":"WordPress","product":"Core","vulnerabilityName":"WordPress Core Remote File Inclusion Vulnerability","dateAdded":"2026-09-25","dueDate":"2026-09-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87902"},{"cveID":"CVE-2026-5430","vendorProject":"WSO2","product":"Multiple Products","vulnerabilityName":"WSO2 Multiple Products Path Traversal Vulnerability ","dateAdded":"2026-09-24","dueDate":"2026-09-27","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2026/WSO2-2026-5328/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-5430"},{"cveID":"CVE-2026-71362","vendorProject":"Adobe","product":"Commerce and Magento ","vulnerabilityName":"Adobe Commerce and Magento Incorrect Authorization Vulnerability ","dateAdded":"2026-09-24","dueDate":"2026-09-27","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://helpx.adobe.com/security/products/magento/apsb26-92.html ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-71362"},{"cveID":"CVE-2026-93952","vendorProject":"Arista","product":"VeloCloud Orchestrator","vulnerabilityName":"Arista VeloCloud Orchestrator Improper Input Validation Vulnerability","dateAdded":"2026-09-22","dueDate":"2026-09-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.arista.com/en/support/advisories-notices/security-advisory/24765-security-advisory-0183 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93952"},{"cveID":"CVE-2026-94127","vendorProject":"F5","product":"BIG-IP APM","vulnerabilityName":"F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability","dateAdded":"2026-09-22","dueDate":"2026-09-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"For temporary mitigation to allow for proactive forensic triage, apply the vendor-provided iRule. Once completed, install the final vendor patch as soon as possible. For more information please see: https://my.f5.com/manage/s/article/K000162605 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-94127"},{"cveID":"CVE-2026-93616","vendorProject":"Check Point","product":"Multiple Products","vulnerabilityName":"Check Point Multiple Products Path Traversal Vulnerability","dateAdded":"2026-09-22","dueDate":"2026-09-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.checkpoint.com/results/sk/sk1000171/ ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-93616"},{"cveID":"CVE-2026-85102","vendorProject":"Check Point","product":"Multiple Products","vulnerabilityName":"Check Point Multiple Products Improper Certificate Validation Vulnerability","dateAdded":"2026-09-22","dueDate":"2026-09-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.checkpoint.com/results/sk/sk1000117 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85102"},{"cveID":"CVE-2026-7273","vendorProject":"Zyxel","product":"GS1900 Series Switches","vulnerabilityName":"Zyxel GS1900 Series Switches Stack-Based Buffer Overflow Vulnerability","dateAdded":"2026-09-21","dueDate":"2026-09-24","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-stack-based-buffer-overflow-vulnerability-in-gs1900-series-switches-06-16-2026 ; ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-7273"},{"cveID":"CVE-2025-39964","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","dateAdded":"2026-09-18","dueDate":"2026-09-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/0f28c4adbc4a97437874c9b669fd7958a8c6d6ce; https://git.kernel.org/stable/c/e4c1ec11132ec466f7362a95f36a506ce4dc08c9; https://git.kernel.org/stable/c/1f323a48e9b5ebfe6dc7d130fdf5c3c0e92a07c8; https://git.kernel.org/stable/c/7c4491b5644e3a3708f3dbd7591be0a570135b84; https://git.kernel.org/stable/c/9aee87da5572b3a14075f501752e209801160d3d; https://git.kernel.org/stable/c/45bcf60fe49b37daab1acee57b27211ad1574042; https://git.kernel.org/stable/c/1b34cbbf4f011a121ef7b2d7d6e6920a036d5285 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39964"},{"cveID":"CVE-2026-53266","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2026-09-18","dueDate":"2026-09-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/bf84ad7c7a9ede46e31afaa41a1ba06a159e8c87; https://git.kernel.org/stable/c/76280b78cc9f23bdc6438e10ad6dff148ef8375b; https://git.kernel.org/stable/c/b7e91939ba9be805a62a257fa4e227dffbb88fa0; https://git.kernel.org/stable/c/afd64b59c3de9bbbdd3759e834fdc55cda716e0b; https://git.kernel.org/stable/c/153ea96c806aea395daba907a4f88480b6ad5093; https://git.kernel.org/stable/c/b18675263db1147c8e1cab625400c13a0d87bd2d; https://git.kernel.org/stable/c/c9b5ff59feffb92a147a84a5aa28acd2cb8ff4c5; https://git.kernel.org/stable/c/67ba971ae02514d85818fe0c32549ab4bfa3bf49 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53266"},{"cveID":"CVE-2025-39682","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability","dateAdded":"2026-09-18","dueDate":"2026-09-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/2902c3ebcca52ca845c03182000e8d71d3a5196f; https://git.kernel.org/stable/c/c09dd3773b5950e9cfb6c9b9a5f6e36d06c62677; https://git.kernel.org/stable/c/3439c15ae91a517cf3c650ea15a8987699416ad9; https://git.kernel.org/stable/c/29c0ce3c8cdb6dc5d61139c937f34cb888a6f42e; https://git.kernel.org/stable/c/62708b9452f8eb77513115b17c4f8d1a22ebf843 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-39682"},{"cveID":"CVE-2026-58704","vendorProject":"Google","product":"Pixel","vulnerabilityName":"Google Pixel Improper Authorization Vulnerability","dateAdded":"2026-09-16","dueDate":"2026-09-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://source.android.com/docs/security/bulletin/pixel/2026/2026-09-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58704"},{"cveID":"CVE-2026-76460","vendorProject":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability","dateAdded":"2026-09-16","dueDate":"2026-09-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ISE-ABP-VNSW7Tn5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76460"},{"cveID":"CVE-2026-87886","vendorProject":"Acronis","product":"Backup","vulnerabilityName":"Acronis Backup Incorrect Default Permissions Vulnerability","dateAdded":"2026-09-16","dueDate":"2026-09-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://security-advisory.acronis.com/advisories/SEC-10986 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87886"},{"cveID":"CVE-2026-76461","vendorProject":"Cisco","product":"Secure Email Gateway","vulnerabilityName":"Cisco Secure Email Gateway SQL Injection Vulnerability","dateAdded":"2026-09-14","dueDate":"2026-09-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-inj-2bLVGmhX ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-76461"},{"cveID":"CVE-2026-84869","vendorProject":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability","dateAdded":"2026-09-11","dueDate":"2026-09-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.connectwise.com/company/trust/security-bulletins/2026-09-08-screenconnect-bulletin ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-84869"},{"cveID":"CVE-2026-42016","vendorProject":"JFrog","product":"Artifactory","vulnerabilityName":"JFrog Artifactory Incorrect Authorization Vulnerability","dateAdded":"2026-09-11","dueDate":"2026-09-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-42016"},{"cveID":"CVE-2026-42018","vendorProject":"JFrog","product":"Artifactory","vulnerabilityName":"JFrog Artifactory Improper Authentication Vulnerability","dateAdded":"2026-09-11","dueDate":"2026-09-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-42018"},{"cveID":"CVE-2026-85706","vendorProject":"GitLab","product":"Community Edition and Enterprise Edition","vulnerabilityName":"GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability","dateAdded":"2026-09-11","dueDate":"2026-09-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-3-2-released/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85706"},{"cveID":"CVE-2026-86060","vendorProject":"MikroTik","product":"RouterOS","vulnerabilityName":"MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability","dateAdded":"2026-09-10","dueDate":"2026-09-13","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://mikrotik.com/supportsec/september-2026-vulnerability ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86060"},{"cveID":"CVE-2026-67277","vendorProject":"MikroTik","product":"RouterOS","vulnerabilityName":"MikroTik RouterOS Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-09-10","dueDate":"2026-09-13","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://mikrotik.com/supportsec/september-2026-vulnerability/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-67277"},{"cveID":"CVE-2026-19490","vendorProject":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.citrix.com/external/article/CTX696939/netscaler-adc-and-netscaler-gateway-secu.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-19490"},{"cveID":"CVE-2025-25249","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249"},{"cveID":"CVE-2026-87491","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out of Bounds Write Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-23","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_0808145027.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-87491 "},{"cveID":"CVE-2026-20079","vendorProject":"Cisco","product":"Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management","vulnerabilityName":"Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-onprem-fmc-authbypass-5JPp45V2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20079"},{"cveID":"CVE-2026-75650","vendorProject":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://helpx.adobe.com/security/products/magento/apsb26-146.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-75650"},{"cveID":"CVE-2026-81963","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Link Following Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-22","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-81963 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-81963"},{"cveID":"CVE-2026-86218","vendorProject":"N-able","product":"N-central","vulnerabilityName":"N-able N-central Static Code Injection Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-11","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://status.n-able.com/2026/09/06/n-central-2026-3-hotfix-4-cve-2026-86218/ ; https://me.n-able.com/s/security-advisory/aArVy0000002Ld3KAE/cve202686218-preauthentication-remote-code-execution ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-86218"},{"cveID":"CVE-2026-85880","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Heap-Based Buffer Overflow Vulnerability","dateAdded":"2026-09-08","dueDate":"2026-09-22","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-85880 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85880"},{"cveID":"CVE-2026-85046","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2026-09-04","dueDate":"2026-09-18","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://chromereleases.googleblog.com/2026/09/stable-channel-update-for-desktop_01882797386.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-85046"},{"cveID":"CVE-2026-59822","vendorProject":"BerriAI","product":"LiteLLM","vulnerabilityName":"BerriAI LiteLLM Improper Authentication Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-16","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/BerriAI/litellm/security/advisories/GHSA-7488-6r32-c95q ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-59822"},{"cveID":"CVE-2026-48710","vendorProject":"Kludex","product":"Starlette","vulnerabilityName":"Kludex Starlette HTTP Request/Response Smuggling Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-16","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48710"},{"cveID":"CVE-2026-49869","vendorProject":"Kestra","product":"Kestra OSS","vulnerabilityName":"Kestra OSS OS Command Injection Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/kestra-io/kestra/security/advisories/GHSA-5vc5-wxxq-3fjx ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-49869"},{"cveID":"CVE-2026-82329","vendorProject":"JFrog","product":"Artifactory","vulnerabilityName":"JFrog Artifactory Improper Authentication Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-82329"},{"cveID":"CVE-2026-9586","vendorProject":"Sangoma","product":"Switchvox","vulnerabilityName":"Sangoma Switchvox SQL Injection Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sangomakb.atlassian.net/wiki/spaces/Switchvox/pages/1802371073/Switchvox+-+Release+Notes+Version+8.4.0.2+July+14+2026 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-9586"},{"cveID":"CVE-2026-83548","vendorProject":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-83548"},{"cveID":"CVE-2026-83549","vendorProject":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances OS Command Injection Vulnerability","dateAdded":"2026-09-02","dueDate":"2026-09-05","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0016 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-83549"},{"cveID":"CVE-2026-82078","vendorProject":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Unsafe Reflection Vulnerability","dateAdded":"2026-08-31","dueDate":"2026-09-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/?lid=2oneu2wt0ct4 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-82078"},{"cveID":"CVE-2026-81578","vendorProject":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-08-31","dueDate":"2026-09-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.papercut.com/kb/Main/security-bulletin-27-aug-2026-urgent-security-advisory/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-81578"},{"cveID":"CVE-2023-49105","vendorProject":"ownCloud","product":"ownCloud","vulnerabilityName":"ownCloud Improper Authentication Vulnerability","dateAdded":"2026-08-27","dueDate":"2026-08-30","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://owncloud.org/security ; https://owncloud.com/security-advisories/webdav-api-authentication-bypass-using-pre-signed-urls/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-49105"},{"cveID":"CVE-2026-53362","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Unspecified Vulnerability","dateAdded":"2026-08-27","dueDate":"2026-08-30","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: ; https://git.kernel.org/stable/c/14200d435af9a9eeb444f529fc2f689a236b7962; https://git.kernel.org/stable/c/65fb14cbebb0cd0eff903a22d33537ddc8b95769; https://git.kernel.org/stable/c/46f201f8b4c39633a1fa3dc12459f506d470993d; https://git.kernel.org/stable/c/6374fb9edf72c67a118a2c214a0dddd04c921e0a; https://git.kernel.org/stable/c/e9eacf19281ea2498b36291b56c9606118c2d74e; https://git.kernel.org/stable/c/736b380e28d0480c7bc3e022f1950f31fe53a7c5 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-53362"},{"cveID":"CVE-2026-66384","vendorProject":"JFrog","product":"Artifactory","vulnerabilityName":"JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability","dateAdded":"2026-08-27","dueDate":"2026-09-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://docs.jfrog.com/releases/docs/jfrog-security-advisories ; https://docs.jfrog.com/releases/docs/artifactory-self-managed-releases ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-66384"},{"cveID":"CVE-2021-23758","vendorProject":"Ajax.NET Professional","product":"Ajax.NET Professional","vulnerabilityName":"Ajax.NET Professional Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/michaelschwarz/Ajax.NET-Professional/commit/b0e63be5f0bb20dfce507cb8a1a9568f6e73de57 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-23758"},{"cveID":"CVE-2015-3246","vendorProject":"Red Hat","product":"Libuser","vulnerabilityName":"Red Hat Libuser Race Condition Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://access.redhat.com/articles/1537873 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3246"},{"cveID":"CVE-2015-5287","vendorProject":"Red Hat","product":"Automatic Bug Reporting Tool","vulnerabilityName":"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-09-09","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/abrt/abrt/commit/3c1b60cfa62d39e5fff5a53a5bc53dae189e740e ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-5287"},{"cveID":"CVE-2022-0995","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-08-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2022-0995"},{"cveID":"CVE-2026-8452","vendorProject":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-08-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8452"},{"cveID":"CVE-2019-1068","vendorProject":"Microsoft","product":"SQL Server","vulnerabilityName":"Microsoft SQL Server Remote Code Execution Vulnerability","dateAdded":"2026-08-26","dueDate":"2026-08-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1068 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2019-1068"},{"cveID":"CVE-2026-60004","vendorProject":"Gitea","product":"Gitea","vulnerabilityName":"Gitea Code Injection Vulnerability","dateAdded":"2026-08-25","dueDate":"2026-08-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/go-gitea/gitea/security/advisories/GHSA-rcr6-4jqh-j84m ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-60004"},{"cveID":"CVE-2026-21962","vendorProject":"Oracle","product":"HTTP Server and Oracle Weblogic Server Proxy Plug-in","vulnerabilityName":"Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability","dateAdded":"2026-08-24","dueDate":"2026-08-27","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.oracle.com/security-alerts/cpujan2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-21962"},{"cveID":"CVE-2026-73570","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Zimbra Collaboration Suite (ZCS) OS Command Injection Vulnerability","dateAdded":"2026-08-21","dueDate":"2026-08-24","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://blog.zimbra.com/2026/07/patch-release-update-zimbra-10-1-20/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-73570"},{"cveID":"CVE-2026-72530","vendorProject":"TrueConf","product":"Server","vulnerabilityName":"TrueConf Server Code Injection Vulnerability","dateAdded":"2026-08-20","dueDate":"2026-09-03","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://trueconf.com/blog/news/security-fixes-updates-and-advisories ; https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-breakout-from-isolated-environment/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72530"},{"cveID":"CVE-2026-72529","vendorProject":"TrueConf","product":"Server","vulnerabilityName":"TrueConf Server Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-08-20","dueDate":"2026-08-23","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://trueconf.com/blog/news/security-fixes-updates-and-advisories ; https://ics-cert.kaspersky.com/advisories/2026/08/11/trueconf-server-missing-authentication-for-critical-function/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72529"},{"cveID":"CVE-2026-64849","vendorProject":"MLflow","product":"MLflow","vulnerabilityName":"MLflow Server-Side Request Forgery Vulnerability","dateAdded":"2026-08-19","dueDate":"2026-09-02","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/mlflow/mlflow/pull/24258 ; https://github.com/mlflow/mlflow/issues/24179 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-64849"},{"cveID":"CVE-2026-33824","vendorProject":"Microsoft","product":"Internet Key Exchange (IKE) Service Extensions","vulnerabilityName":"Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-33824 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-33824"},{"cveID":"CVE-2026-59310","vendorProject":"Broadcom","product":"VMware vCenter","vulnerabilityName":"Broadcom VMware vCenter Path Traversal Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/38017 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-59310"},{"cveID":"CVE-2026-55040","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Weak Authentication Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55040 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-55040"},{"cveID":"CVE-2026-65400","vendorProject":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Improper Authentication Vulnerability","dateAdded":"2026-08-18","dueDate":"2026-08-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.apple.com/en-us/148170; https://support.apple.com/en-us/148171; https://support.apple.com/en-us/148172 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-65400"},{"cveID":"CVE-2025-62593","vendorProject":"Ray-Project","product":"Ray","vulnerabilityName":"Ray-Project Ray Code Injection Vulnerability","dateAdded":"2026-08-17","dueDate":"2026-08-20","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/ray-project/ray/security/advisories/GHSA-q279-jhrf-cc6v ; https://github.com/ray-project/ray/commit/70e7c72780bdec075dba6cad1afe0832772bfe09 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-62593"},{"cveID":"CVE-2026-20349","vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) ","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-vpn-dos-dzv4mQFF ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20349"},{"cveID":"CVE-2026-68820","vendorProject":"Microsoft","product":"Windows Ancillary Function Driver for WinSock ","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2026-68820 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-68820"},{"cveID":"CVE-2026-72898","vendorProject":"Metabase","product":"Metabase","vulnerabilityName":"Metabase SQL Injection Vulnerability","dateAdded":"2026-08-11","dueDate":"2026-08-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.metabase.com/blog/security-update ; https://github.com/metabase/metabase/security/advisories/GHSA-vwf4-m7j8-wcjf ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-72898"},{"cveID":"CVE-2026-8037","vendorProject":"Progress","product":"LoadMaster","vulnerabilityName":"Progress LoadMaster Command Injection Vulnerability","dateAdded":"2026-08-07","dueDate":"2026-08-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://community.progress.com/s/article/LoadMaster-Critical-Security-Bulletin-June-2026-CVE-2026-8037-CVE-2026-33691 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-8037"},{"cveID":"CVE-2026-63077","vendorProject":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-08-05","dueDate":"2026-08-08","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://blog.jetbrains.com/teamcity/2026/07/cve-2026-63077/; https://www.jetbrains.com/privacy-security/issues-fixed/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-63077"},{"cveID":"CVE-2026-18556","vendorProject":"N-able","product":"N-central","vulnerabilityName":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://uptime.n-able.com/ ; https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-18556"},{"cveID":"CVE-2026-34486","vendorProject":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Missing Encryption of Sensitive Data Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://lists.apache.org/thread/9510k5p5zdvt9pkkgtyp85mvwxo2qrly ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34486"},{"cveID":"CVE-2026-9198","vendorProject":"IBM","product":"Langflow","vulnerabilityName":"IBM Langflow Code Injection Vulnerability","dateAdded":"2026-08-04","dueDate":"2026-08-07","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.ibm.com/support/pages/node/7278927 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-9198"},{"cveID":"CVE-2026-18577","vendorProject":"N-able","product":"N-central","vulnerabilityName":"N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-08-03","dueDate":"2026-08-06","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2026.3_HF1_Release_Notes.htm ; https://status.n-able.com/2026/08/02/n-central-2026-3-hotfix-1-mitigation-for-cve-2026-18577/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-18577"},{"cveID":"CVE-2026-20316","vendorProject":"Cisco","product":"Secure Firewall Management Center (FMC)","vulnerabilityName":"Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability","dateAdded":"2026-07-29","dueDate":"2026-08-01","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-static-cred-BET3Cjh ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20316"},{"cveID":"CVE-2025-68686","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","dateAdded":"2026-07-27","dueDate":"2026-08-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686"},{"cveID":"CVE-2026-16812","vendorProject":"Arista","product":"VeloCloud Orchestrator","vulnerabilityName":"Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability","dateAdded":"2026-07-27","dueDate":"2026-07-30","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.arista.com/en/support/advisories-notices/security-advisory/24364-security-advisory-0144 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16812"},{"cveID":"CVE-2026-16232","vendorProject":"Check Point","product":"SmartConsole","vulnerabilityName":"Check Point SmartConsole Improper Authentication Vulnerability","dateAdded":"2026-07-22","dueDate":"2026-07-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://support.checkpoint.com/results/sk/sk185169/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-16232"},{"cveID":"CVE-2026-50522","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability ","dateAdded":"2026-07-22","dueDate":"2026-07-25","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-50522 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-50522"},{"cveID":"CVE-2026-60137","vendorProject":"WordPress","product":"Core","vulnerabilityName":"WordPress Core SQL Injection Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-08-04","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-60137"},{"cveID":"CVE-2026-63030","vendorProject":"WordPress","product":"Core","vulnerabilityName":"WordPress Core Interpretation Conflict Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-07-24","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://wordpress.org/news/2026/07/wordpress-7-0-2-release/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-63030"},{"cveID":"CVE-2026-0770","vendorProject":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-07-24","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/langflow-ai/langflow/releases/tag/v1.9.0 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-0770 "},{"cveID":"CVE-2021-27137","vendorProject":"DD-WRT","product":"DD-WRT","vulnerabilityName":"DD-WRT Stack-Based Buffer Overflow Vulnerability","dateAdded":"2026-07-21","dueDate":"2026-07-24","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"This vulnerability affects a common open-source component, third-party library, proprietary implementation, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://svn.dd-wrt.com/changeset/45724 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2021-27137"},{"cveID":"CVE-2026-58644","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58644 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-58644"},{"cveID":"CVE-2026-25089","vendorProject":"Fortinet","product":"FortiSandbox","vulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-26-141 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-25089"},{"cveID":"CVE-2026-39808","vendorProject":"Fortinet","product":"FortiSandbox","vulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-26-100 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-39808"},{"cveID":"CVE-2026-46817","vendorProject":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Improper Privilege Management Vulnerability","dateAdded":"2026-07-15","dueDate":"2026-07-18","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.oracle.com/security-alerts/cspumay2026.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-46817"},{"cveID":"CVE-2023-4346","vendorProject":"KNX Association","product":"KNX Protocol Connection Authorization Option 1","vulnerabilityName":"KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability","dateAdded":"2026-07-15","dueDate":"2026-07-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.cisa.gov/news-events/ics-advisories/icsa-23-236-01 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2023-4346"},{"cveID":"CVE-2026-56155","vendorProject":"Microsoft","product":"Active Directory Federation Services","vulnerabilityName":"Microsoft Active Directory Federation Services Insufficient Granularity of Access Control Vulnerability ","dateAdded":"2026-07-14","dueDate":"2026-07-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56155 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-56155; https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/decommission/adfs-decommission-guide"},{"cveID":"CVE-2026-56164","vendorProject":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-56164 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-56164"},{"cveID":"CVE-2026-15409","vendorProject":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-15409"},{"cveID":"CVE-2026-15410","vendorProject":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Code Injection Vulnerability","dateAdded":"2026-07-14","dueDate":"2026-07-17","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2026-0008 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-15410"},{"cveID":"CVE-2008-4128","vendorProject":"Cisco","product":"IOS","vulnerabilityName":"Cisco IOS Cross-Site Request Forgery Vulnerability","dateAdded":"2026-07-13","dueDate":"2026-07-16","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.cisco.com/c/en/us/obsolete/ios-nx-os-software/cisco-ios-software-releases-12-4-mainline.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2008-4128"},{"cveID":"CVE-2026-56291","vendorProject":"Balbooa","product":"Forms","vulnerabilityName":"Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-07-10","dueDate":"2026-07-13","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.balbooa.com/joomla-forms ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-56291"},{"cveID":"CVE-2026-48939","vendorProject":"iCagenda","product":"iCagenda","vulnerabilityName":"iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-07-10","dueDate":"2026-07-13","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.icagenda.com/#download ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48939"},{"cveID":"CVE-2026-48908","vendorProject":"JoomShaper","product":"SP Page Builder","vulnerabilityName":"JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://extensions.joomla.org/extension/sp-page-builder/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48908"},{"cveID":"CVE-2026-55255","vendorProject":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Authorization Bypass Through User-Controlled Key Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-qrpv-q767-xqq2 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-55255"},{"cveID":"CVE-2026-56290","vendorProject":"Joomlack","product":"Page Builder","vulnerabilityName":"Joomlack Page Builder Improper Access Control Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.joomlack.fr/en/joomla-extensions/page-builder-ck ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-56290"},{"cveID":"CVE-2026-48282","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Path Traversal Vulnerability","dateAdded":"2026-07-07","dueDate":"2026-07-10","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb26-68.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48282"},{"cveID":"CVE-2026-45659","vendorProject":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-07-01","dueDate":"2026-07-04","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45659 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-45659"},{"cveID":"CVE-2026-48558","vendorProject":"SimpleHelp ","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Authentication Bypass Vulnerability","dateAdded":"2026-06-29","dueDate":"2026-07-02","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://simple-help.com/security/simplehelp-security-update-2026-05 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48558"},{"cveID":"CVE-2026-12569","vendorProject":"PTC","product":"Windchill and FlexPLM","vulnerabilityName":"PTC Windchill and FlexPLM Improper Input Validation Vulnerability","dateAdded":"2026-06-25","dueDate":"2026-06-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.ptc.com/en/support/article/CS473270 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-12569"},{"cveID":"CVE-2026-20230","vendorProject":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-06-25","dueDate":"2026-06-28","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-cucm-ssrf-cXPnHcW.html ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20230"},{"cveID":"CVE-2025-67038","vendorProject":"Lantronix","product":"EDS5000","vulnerabilityName":"Lantronix EDS5000 Code Injection Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://ltrxdev.atlassian.net/wiki/spaces/LTRXTS/pages/2538438657/Latest+Firmware+for+the+EDS5000+series+EDS5008+EDS5016+EDS5032 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-67038"},{"cveID":"CVE-2026-34910","vendorProject":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Improper Input Validation Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34910"},{"cveID":"CVE-2026-34909","vendorProject":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Path Traversal Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34909"},{"cveID":"CVE-2026-34908","vendorProject":"Ubiquiti","product":"UniFi OS","vulnerabilityName":"Ubiquiti UniFi OS Improper Access Control Vulnerability","dateAdded":"2026-06-23","dueDate":"2026-06-26","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://community.ui.com/releases/Security-Advisory-Bulletin-064-064/84811c09-4cf4-42ab-bd61-cc994445963b ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-34908"},{"cveID":"CVE-2026-20253","vendorProject":"Splunk","product":"Enterprise","vulnerabilityName":"Splunk Enterprise Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-06-18","dueDate":"2026-06-21","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://advisory.splunk.com/advisories/SVD-2026-0603 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20253"},{"cveID":"CVE-2026-48907","vendorProject":"Widget Factory","product":"Joomla Content Editor ","vulnerabilityName":"Widget Factory Joomla Content Editor Improper Access Control Vulnerability","dateAdded":"2026-06-16","dueDate":"2026-06-19","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.joomlacontenteditor.net/news/jce-security-update-and-a-free-patch-for-older-sites ; https://www.joomlacontenteditor.net/support/changelog/editor ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-48907"},{"cveID":"CVE-2026-54420","vendorProject":"LiteSpeed","product":"cPanel Plugin","vulnerabilityName":"LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Vulnerability","dateAdded":"2026-06-15","dueDate":"2026-06-18","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://blog.litespeedtech.com/2026/06/01/security-update-for-litespeed-cpanel-plugin-2/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-54420"},{"cveID":"CVE-2026-20262","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerability","dateAdded":"2026-06-15","dueDate":"2026-06-29","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfw-c2rZvQ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20262"},{"cveID":"CVE-2026-35273","vendorProject":"Oracle","product":" PeopleSoft Enterprise PeopleTools","vulnerabilityName":"Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-06-12","dueDate":"2026-06-15","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://www.oracle.com/security-alerts/alert-cve-2026-35273.html ; https://support.oracle.com/signin/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-35273"},{"cveID":"CVE-2026-10520","vendorProject":"Ivanti","product":"Sentry","vulnerabilityName":"Ivanti Sentry OS Command Injection Vulnerability","dateAdded":"2026-06-11","dueDate":"2026-06-14","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2026-10520-CVE-2026-10523?language=en_US ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-10520"},{"cveID":"CVE-2026-11645","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html ; https://issues.chromium.org/issues/506689381 ; https://nvd.nist.gov/vuln/detail/CVE-2026-11645"},{"cveID":"CVE-2026-7473","vendorProject":"Arista","product":"Extensible Operating System","vulnerabilityName":"Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.arista.com/en/support/advisories-notices/security-advisory/24005-security-advisory-0137 ; https://nvd.nist.gov/vuln/detail/CVE-2026-7473"},{"cveID":"CVE-2026-20245","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerability","dateAdded":"2026-06-09","dueDate":"2026-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-4uxFrdzx ; https://nvd.nist.gov/vuln/detail/CVE-2026-20245"},{"cveID":"CVE-2026-42271","vendorProject":"BerriAI","product":"LiteLLM","vulnerabilityName":"BerriAI LiteLLM Command Injection Vulnerability","dateAdded":"2026-06-08","dueDate":"2026-06-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://github.com/BerriAI/litellm/security/advisories/GHSA-v4p8-mg3p-g94g ; https://github.com/BerriAI/litellm/releases/tag/v1.83.7-stable ; https://nvd.nist.gov/vuln/detail/CVE-2026-42271"},{"cveID":"CVE-2026-50751","vendorProject":"Check Point","product":"Security Gateway","vulnerabilityName":"Check Point Security Gateway Improper Authentication Vulnerability","dateAdded":"2026-06-08","dueDate":"2026-06-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://blog.checkpoint.com/security/check-point-releases-important-hotfix-for-vulnerabilities-in-deprecated-ikev1-vpn-protocol/ ; https://support.checkpoint.com/results/sk/sk185033?_gl=1*1wqeqhc*_gcl_au*MTI1MzE5MjI2LjE3ODA5MzQ1NTM. ; https://nvd.nist.gov/vuln/detail/CVE-2026-50751"},{"cveID":"CVE-2026-28318","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability","dateAdded":"2026-06-05","dueDate":"2026-06-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28318 ; https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4-hotfix-1_release_notes.htm#link7 ; https://nvd.nist.gov/vuln/detail/CVE-2026-28318"},{"cveID":"CVE-2026-45247","vendorProject":"Mirasvit","product":"Mirasvit Full Page Cache Warmer","vulnerabilityName":"Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-06-03","dueDate":"2026-06-06","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://mirasvit.com/package/changelog/?package=mirasvit/module-cache-warmer ; https://nvd.nist.gov/vuln/detail/CVE-2026-45247"},{"cveID":"CVE-2022-0492","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Authentication Vulnerability","dateAdded":"2026-06-02","dueDate":"2026-06-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=24f6008564183aa120d07c03d9289519c2fe02af ; https://www.kernel.org/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-0492"},{"cveID":"CVE-2025-48595","vendorProject":"Android","product":"Framework","vulnerabilityName":"Android Framework Integer Overflow Vulnerability","dateAdded":"2026-06-02","dueDate":"2026-06-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/2026/2026-06-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48595"},{"cveID":"CVE-2024-21182","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2026-06-01","dueDate":"2026-06-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpujul2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21182"},{"cveID":"CVE-2026-0257","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","dateAdded":"2026-05-29","dueDate":"2026-06-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/CVE-2026-0257 ; https://nvd.nist.gov/vuln/detail/CVE-2026-0257"},{"cveID":"CVE-2026-48027","vendorProject":"Nx","product":"Nx Console","vulnerabilityName":"Nx Console Embedded Malicious Code Vulnerability","dateAdded":"2026-05-27","dueDate":"2026-06-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/nrwl/nx-console/security/advisories/GHSA-c9j4-9m59-847w ; https://nvd.nist.gov/vuln/detail/CVE-2026-48027"},{"cveID":"CVE-2026-45321","vendorProject":"TanStack","product":"TanStack","vulnerabilityName":"TanStack Unspecified Vulnerability","dateAdded":"2026-05-27","dueDate":"2026-06-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/TanStack/router/security/advisories/GHSA-g7cv-rxg3-hmpx ; https://nvd.nist.gov/vuln/detail/CVE-2026-45321"},{"cveID":"CVE-2026-8398","vendorProject":"Daemon","product":"Daemon Tools Lite","vulnerabilityName":"Daemon Tools Lite Embedded Malicious Code Vulnerability","dateAdded":"2026-05-27","dueDate":"2026-05-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://blog.daemon-tools.cc/post/security-incident ; https://nvd.nist.gov/vuln/detail/CVE-2026-8398"},{"cveID":"CVE-2026-48172","vendorProject":"LiteSpeed","product":"cPanel Plugin","vulnerabilityName":"LiteSpeed cPanel Plugin Privilege Escalation Vulnerability","dateAdded":"2026-05-26","dueDate":"2026-05-29","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://blog.litespeedtech.com/2026/05/21/security-update-for-litespeed-cpanel-plugin/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-48172"},{"cveID":"CVE-2026-9082","vendorProject":"Drupal","product":"Core","vulnerabilityName":"Drupal Core SQL Injection Vulnerability","dateAdded":"2026-05-22","dueDate":"2026-05-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.drupal.org/sa-core-2026-004 ; https://nvd.nist.gov/vuln/detail/CVE-2026-9082"},{"cveID":"CVE-2025-34291","vendorProject":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Origin Validation Error Vulnerability","dateAdded":"2026-05-21","dueDate":"2026-06-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/langflow-ai/langflow ; https://github.com/langflow-ai/langflow/releases/tag/v1.9.3; https://github.com/langflow-ai/langflow/issues/11465#event-25774545848 ; https://nvd.nist.gov/vuln/detail/CVE-2025-34291"},{"cveID":"CVE-2026-34926","vendorProject":"Trend Micro","product":"Apex One","vulnerabilityName":"Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability","dateAdded":"2026-05-21","dueDate":"2026-06-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://success.trendmicro.com/en-US/solution/KA-0023430 ; https://nvd.nist.gov/vuln/detail/CVE-2026-34926"},{"cveID":"CVE-2008-4250","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Buffer Overflow Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067 ; https://nvd.nist.gov/vuln/detail/CVE-2008-4250"},{"cveID":"CVE-2009-1537","vendorProject":"Microsoft","product":"DirectX","vulnerabilityName":"Microsoft DirectX NULL Byte Overwrite Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-028 ; https://nvd.nist.gov/vuln/detail/CVE-2009-1537"},{"cveID":"CVE-2009-3459","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.cisa.gov/news-events/alerts/2009/10/13/adobe-reader-and-acrobat-vulnerabilities ; https://web.archive.org/web/20120324170253/http://www.adobe.com/support/security/bulletins/apsb09-15.html#:~:text=CVE%2D2009%2D3459).-,NOTE%3A,-There%20are%20reports ; https://nvd.nist.gov/vuln/detail/CVE-2009-3459"},{"cveID":"CVE-2010-0249","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/979352 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0249"},{"cveID":"CVE-2010-0806","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securityadvisories/2010/981374 ; https://nvd.nist.gov/vuln/detail/CVE-2010-0806"},{"cveID":"CVE-2026-41091","vendorProject":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Link Following Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-41091 ; https://nvd.nist.gov/vuln/detail/CVE-2026-41091"},{"cveID":"CVE-2026-45498","vendorProject":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Denial of Service Vulnerability","dateAdded":"2026-05-20","dueDate":"2026-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-45498 ; https://nvd.nist.gov/vuln/detail/CVE-2026-45498"},{"cveID":"CVE-2026-42897","vendorProject":"Microsoft","product":"Microsoft","vulnerabilityName":"Microsoft Exchange Server Cross-Site Scripting Vulnerability","dateAdded":"2026-05-15","dueDate":"2026-05-29","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-42897 ; https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-emergency-mitigation-service ; https://nvd.nist.gov/vuln/detail/CVE-2026-42897"},{"cveID":"CVE-2026-20182","vendorProject":"Cisco","product":"Catalyst SD-WAN","vulnerabilityName":"Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability","dateAdded":"2026-05-14","dueDate":"2026-05-17","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlined in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa2-v69WY2SW ; https://nvd.nist.gov/vuln/detail/CVE-2026-20182"},{"cveID":"CVE-2026-42208","vendorProject":"BerriAI","product":"LiteLLM","vulnerabilityName":"BerriAI LiteLLM SQL Injection Vulnerability","dateAdded":"2026-05-08","dueDate":"2026-05-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/BerriAI/litellm/security/advisories/GHSA-r75f-5x8p-qvmc ; https://nvd.nist.gov/vuln/detail/CVE-2026-42208"},{"cveID":"CVE-2026-6973","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability","dateAdded":"2026-05-07","dueDate":"2026-05-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://hub.ivanti.com/s/article/May-2026-Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-Multiple-CVEs?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2026-6973"},{"cveID":"CVE-2026-0300","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability","dateAdded":"2026-05-06","dueDate":"2026-05-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Until the vendor releases an official fix, the following workaround should be implemented:  - Restrict User-ID Authentication Portal access to only trusted zones.  - Disable User-ID Authentication Portal if not required. 5/13/2026: Palo Alto has released a variety of patches. If these are relevant to your environment, please apply the designated patch.","notes":"https://security.paloaltonetworks.com/CVE-2026-0300 ; https://nvd.nist.gov/vuln/detail/CVE-2026-0300"},{"cveID":"CVE-2026-31431","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","dateAdded":"2026-05-01","dueDate":"2026-05-15","requiredAction":"\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://lore.kernel.org/linux-cve-announce/2026042214-CVE-2026-31431-3d65@gregkh/; https://xint.io/blog/copy-fail-linux-distributions#the-fix-6 ; https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-31431"},{"cveID":"CVE-2026-41940","vendorProject":"WebPros","product":"cPanel & WHM and WP2 (WordPress Squared)","vulnerabilityName":"WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-04-30","dueDate":"2026-05-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.cpanel.net/hc/en-us/articles/40073787579671-cPanel-WHM-Security-Update-04-28-2026 ; https://docs.cpanel.net/release-notes/release-notes/ ; https://docs.wpsquared.com/changelogs/versions/changelog/#13617 ; https://nvd.nist.gov/vuln/detail/CVE-2026-41940\""},{"cveID":"CVE-2024-1708","vendorProject":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Path Traversal Vulnerability","dateAdded":"2026-04-28","dueDate":"2026-05-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1708"},{"cveID":"CVE-2026-32202","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Protection Mechanism Failure Vulnerability","dateAdded":"2026-04-28","dueDate":"2026-05-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32202 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32202"},{"cveID":"CVE-2025-29635","vendorProject":"D-Link","product":"DIR-823X","vulnerabilityName":"D-Link DIR-823X Command Injection Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10469 ; https://nvd.nist.gov/vuln/detail/CVE-2025-29635"},{"cveID":"CVE-2024-7399","vendorProject":"Samsung","product":"MagicINFO 9 Server","vulnerabilityName":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://security.samsungtv.com/securityUpdates ; https://nvd.nist.gov/vuln/detail/CVE-2024-7399"},{"cveID":"CVE-2024-57728","vendorProject":"SimpleHelp ","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Path Traversal Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier ; https://nvd.nist.gov/vuln/detail/CVE-2024-57728"},{"cveID":"CVE-2024-57726","vendorProject":"SimpleHelp ","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Missing Authorization Vulnerability","dateAdded":"2026-04-24","dueDate":"2026-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier ; https://nvd.nist.gov/vuln/detail/CVE-2024-57726"},{"cveID":"CVE-2026-39987","vendorProject":"Marimo","product":"Marimo","vulnerabilityName":"Marimo Remote Code Execution Vulnerability","dateAdded":"2026-04-23","dueDate":"2026-05-07","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/marimo-team/marimo/security/advisories/GHSA-2679-6mx9-h9xc ; https://nvd.nist.gov/vuln/detail/CVE-2026-39987"},{"cveID":"CVE-2026-33825","vendorProject":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Insufficient Granularity of Access Control Vulnerability","dateAdded":"2026-04-22","dueDate":"2026-05-06","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33825 ; https://nvd.nist.gov/vuln/detail/CVE-2026-33825"},{"cveID":"CVE-2026-20122","vendorProject":"Cisco","product":"Catalyst SD-WAN Manger","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20122"},{"cveID":"CVE-2026-20133","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20133"},{"cveID":"CVE-2025-2749","vendorProject":"Kentico","product":"Kentico Xperience","vulnerabilityName":"Kentico Xperience Path Traversal Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://devnet.kentico.com/download/hotfixes ; https://nvd.nist.gov/vuln/detail/CVE-2025-2749"},{"cveID":"CVE-2023-27351","vendorProject":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Improper Authentication Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.papercut.com/kb/Main/PO-1216-and-PO-1219 ; https://nvd.nist.gov/vuln/detail/CVE-2023-27351"},{"cveID":"CVE-2025-48700","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2025-48700"},{"cveID":"CVE-2026-20128","vendorProject":"Cisco","product":"Catalyst SD-WAN Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-04-23","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-authbp-qwCX8D4v ; https://nvd.nist.gov/vuln/detail/CVE-2026-20128"},{"cveID":"CVE-2025-32975","vendorProject":"Quest","product":"KACE Systems Management Appliance (SMA)","vulnerabilityName":"Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.quest.com/kb/4379499/quest-response-to-kace-sma-vulnerabilities-cve-2025-32975-cve-2025-32976-cve-2025-32977-cve-2025-32978 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32975"},{"cveID":"CVE-2024-27199","vendorProject":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Relative Path Traversal Vulnerability","dateAdded":"2026-04-20","dueDate":"2026-05-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.jetbrains.com/privacy-security/issues-fixed/ ; https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-27199"},{"cveID":"CVE-2026-34197","vendorProject":"Apache","product":"ActiveMQ","vulnerabilityName":"Apache ActiveMQ Improper Input Validation Vulnerability","dateAdded":"2026-04-16","dueDate":"2026-04-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://activemq.apache.org/security-advisories.data/CVE-2026-34197-announcement.txt ; https://nvd.nist.gov/vuln/detail/CVE-2026-34197"},{"cveID":"CVE-2009-0238","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution","dateAdded":"2026-04-14","dueDate":"2026-04-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-009 ; https://nvd.nist.gov/vuln/detail/CVE-2009-0238"},{"cveID":"CVE-2026-32201","vendorProject":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Improper Input Validation Vulnerability","dateAdded":"2026-04-14","dueDate":"2026-04-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-32201 ; https://nvd.nist.gov/vuln/detail/CVE-2026-32201"},{"cveID":"CVE-2012-1854","vendorProject":"Microsoft","product":"Visual Basic for Applications (VBA)","vulnerabilityName":"Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-046 ; https://nvd.nist.gov/vuln/detail/CVE-2012-1854"},{"cveID":"CVE-2025-60710","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Link Following Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-60710 ; https://nvd.nist.gov/vuln/detail/CVE-2025-60710"},{"cveID":"CVE-2023-21529","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529"},{"cveID":"CVE-2023-36424","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Out-of-Bounds Read Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36424 ; https://nvd.nist.gov/vuln/detail/CVE-2023-36424"},{"cveID":"CVE-2020-9715","vendorProject":"Adobe","product":"Acrobat","vulnerabilityName":"Adobe Acrobat Use-After-Free Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb20-48.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-9715"},{"cveID":"CVE-2026-21643","vendorProject":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21643"},{"cveID":"CVE-2026-34621","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Prototype Pollution Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb26-43.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-34621"},{"cveID":"CVE-2026-1340","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","dateAdded":"2026-04-08","dueDate":"2026-04-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Ivanti's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Ivanti products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as possible. For more information please see: https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340?language=en_US ; https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0S-5.noarch.rpm ; https://support.mobileiron.com/mi/vsp/AB1786671/ivanti-security-update-1761642-1.1.0L-5.noarch.rpm ; https://nvd.nist.gov/vuln/detail/CVE-2026-1340"},{"cveID":"CVE-2026-35616","vendorProject":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS Improper Access Control Vulnerability","dateAdded":"2026-04-06","dueDate":"2026-04-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Fortinet's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Fortinet products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://fortiguard.fortinet.com/psirt/FG-IR-26-099 ; https://nvd.nist.gov/vuln/detail/CVE-2026-35616"},{"cveID":"CVE-2026-3502","vendorProject":"TrueConf","product":"Client","vulnerabilityName":"TrueConf Client Download of Code Without Integrity Check Vulnerability","dateAdded":"2026-04-02","dueDate":"2026-04-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://trueconf.com/blog/update/trueconf-8-5 ; https://trueconf.com/downloads/windows.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-3502"},{"cveID":"CVE-2026-5281","vendorProject":"Google","product":"Dawn","vulnerabilityName":"Google Dawn Use-After-Free Vulnerability","dateAdded":"2026-04-01","dueDate":"2026-04-15","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_31.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-5281 "},{"cveID":"CVE-2026-3055","vendorProject":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Out-of-Bounds Read Vulnerability","dateAdded":"2026-03-30","dueDate":"2026-04-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696300&articleURL=NetScaler_ADC_and_NetScaler_Gateway_Security_Bulletin_for_CVE_2026_3055_and_CVE_2026_4368 ; https://nvd.nist.gov/vuln/detail/CVE-2026-3055"},{"cveID":"CVE-2025-53521","vendorProject":"F5","product":"BIG-IP","vulnerabilityName":"F5 BIG-IP Stack-Based Buffer Overflow Vulnerability","dateAdded":"2026-03-27","dueDate":"2026-03-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to F5’s guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible F5 products affected by this vulnerability. For more information please see: https://my.f5.com/manage/s/article/K000156741 ; https://my.f5.com/manage/s/article/K000160486 ; https://my.f5.com/manage/s/article/K11438344 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53521"},{"cveID":"CVE-2026-33634","vendorProject":"Aquasecurity","product":"Trivy","vulnerabilityName":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","dateAdded":"2026-03-26","dueDate":"2026-04-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability involves a supply‑chain compromise in a product that may be used across multiple products and environments. Additional vendor‑provided guidance must be followed to ensure full remediation. For more information, please see: https://github.com/advisories/GHSA-69fq-xp46-6x23 ; https://nvd.nist.gov/vuln/detail/CVE-2026-33634"},{"cveID":"CVE-2026-33017","vendorProject":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Code Injection Vulnerability","dateAdded":"2026-03-25","dueDate":"2026-04-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/langflow-ai/langflow/security/advisories/GHSA-vwmf-pq79-vjvx ; https://nvd.nist.gov/vuln/detail/CVE-2026-33017"},{"cveID":"CVE-2025-32432","vendorProject":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS Code Injection Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://craftcms.com/knowledge-base/craft-cms-cve-2025-32432 ; https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32432"},{"cveID":"CVE-2025-54068","vendorProject":"Laravel","product":"Livewire","vulnerabilityName":"Laravel Livewire Code Injection Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/livewire/livewire/security/advisories/GHSA-29cq-5w36-x7w3 ; https://github.com/livewire/livewire/commit/ef04be759da41b14d2d129e670533180a44987dc ; https://nvd.nist.gov/vuln/detail/CVE-2025-54068"},{"cveID":"CVE-2025-43510","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Improper Locking Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43510"},{"cveID":"CVE-2025-43520","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Classic Buffer Overflow Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/125632 ; https://support.apple.com/en-us/125633 ; https://support.apple.com/en-us/125634 ; https://support.apple.com/en-us/125635 ; https://support.apple.com/en-us/125636 ; https://support.apple.com/en-us/125637 ; https://support.apple.com/en-us/125638 ; https://support.apple.com/en-us/125639 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43520"},{"cveID":"CVE-2025-31277","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Buffer Overflow Vulnerability","dateAdded":"2026-03-20","dueDate":"2026-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/124147 ; https://support.apple.com/en-us/124149 ; https://support.apple.com/en-us/124152 ; https://support.apple.com/en-us/124153 ; https://support.apple.com/en-us/124155 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31277"},{"cveID":"CVE-2026-20131","vendorProject":"Cisco","product":"Secure Firewall Management Center (FMC)","vulnerabilityName":"Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-19","dueDate":"2026-03-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-rce-NKhnULJh ; https://nvd.nist.gov/vuln/detail/CVE-2026-20131"},{"cveID":"CVE-2025-66376","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability","dateAdded":"2026-03-18","dueDate":"2026-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2025-66376"},{"cveID":"CVE-2026-20963","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-18","dueDate":"2026-03-21","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-20963 ; https://nvd.nist.gov/vuln/detail/CVE-2026-20963"},{"cveID":"CVE-2025-47813","vendorProject":"Wing FTP Server","product":"Wing FTP Server","vulnerabilityName":"Wing FTP Server Information Disclosure Vulnerability","dateAdded":"2026-03-16","dueDate":"2026-03-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.wftpserver.com/serverhistory.htm ; https://nvd.nist.gov/vuln/detail/CVE-2025-47813"},{"cveID":"CVE-2026-3910","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability","dateAdded":"2026-03-13","dueDate":"2026-03-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_12.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-3910"},{"cveID":"CVE-2026-3909","vendorProject":"Google","product":"Skia","vulnerabilityName":"Google Skia Out-of-Bounds Write Vulnerability","dateAdded":"2026-03-13","dueDate":"2026-03-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://chromereleases.googleblog.com/2026/03/stable-channel-update-for-desktop_13.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-3909"},{"cveID":"CVE-2025-68613","vendorProject":"n8n","product":"n8n","vulnerabilityName":"n8n Improper Control of Dynamically-Managed Code Resources Vulnerability","dateAdded":"2026-03-11","dueDate":"2026-03-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/n8n-io/n8n/security/advisories/GHSA-v98v-ff95-f3cp ; https://nvd.nist.gov/vuln/detail/CVE-2025-68613"},{"cveID":"CVE-2021-22054","vendorProject":"Omnissa","product":"Workspace One UEM","vulnerabilityName":"Omnissa Workspace ONE Server-Side Request Forgery","dateAdded":"2026-03-09","dueDate":"2026-03-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://web.archive.org/web/20211222154335/https://www.vmware.com/security/advisories/VMSA-2021-0029.html ; https://nvd.nist.gov/vuln/detail/CVE-2021-22054"},{"cveID":"CVE-2025-26399","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-03-09","dueDate":"2026-03-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2025-26399 ; https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_12-8-7-hotfix-1_release_notes.htm ; https://nvd.nist.gov/vuln/detail/CVE-2025-26399"},{"cveID":"CVE-2026-1603","vendorProject":"Ivanti","product":" Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability","dateAdded":"2026-03-09","dueDate":"2026-03-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://hub.ivanti.com/s/article/Security-Advisory-EPM-February-2026-for-EPM-2024?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2026-1603"},{"cveID":"CVE-2017-7921","vendorProject":"Hikvision","product":"Multiple Products","vulnerabilityName":"Hikvision Multiple Products Improper Authentication Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.hikvision.com/us-en/support/document-center/special-notices/privilege-escalating-vulnerability-in-certain-hikvision-ip-cameras/ ; https://nvd.nist.gov/vuln/detail/CVE-2017-7921"},{"cveID":"CVE-2021-22681","vendorProject":"Rockwell","product":"Multiple Products","vulnerabilityName":"Rockwell Multiple Products Insufficient Protected Credentials Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.rockwellautomation.com/app/answers/answer_view/a_id/1130301/~/cve-2021-22681%3A-authentication-bypass-vulnerability-found-in-logix-controllers- ; https://www.cisa.gov/news-events/ics-advisories/icsa-21-056-03 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22681"},{"cveID":"CVE-2023-43000","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple products Use-After-Free Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/120324 ; https://support.apple.com/en-us/120331 ; https://support.apple.com/en-us/120338 ; https://nvd.nist.gov/vuln/detail/CVE-2023-43000"},{"cveID":"CVE-2021-30952","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Integer Overflow or Wraparound Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT212975 ; https://support.apple.com/en-us/HT212976 ; https://support.apple.com/en-us/HT212978 ; https://support.apple.com/en-us/HT212980 ; https://support.apple.com/en-us/HT212982 ; https://nvd.nist.gov/vuln/detail/CVE-2021-30952"},{"cveID":"CVE-2023-41974","vendorProject":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Use-After-Free Vulnerability","dateAdded":"2026-03-05","dueDate":"2026-03-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213938 ; https://support.apple.com/kb/HT213938 ; https://nvd.nist.gov/vuln/detail/CVE-2023-41974"},{"cveID":"CVE-2026-22719","vendorProject":"Broadcom","product":"VMware Aria Operations","vulnerabilityName":"Broadcom VMware Aria Operations Command Injection Vulnerability","dateAdded":"2026-03-03","dueDate":"2026-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36947 ; https://knowledge.broadcom.com/external/article/430349 ; https://nvd.nist.gov/vuln/detail/CVE-2026-22719"},{"cveID":"CVE-2026-21385","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Memory Corruption Vulnerability","dateAdded":"2026-03-03","dueDate":"2026-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2026/2026-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21385"},{"cveID":"CVE-2022-20775","vendorProject":"Cisco","product":"SD-WAN","vulnerabilityName":"Cisco SD-WAN Path Traversal Vulnerability","dateAdded":"2026-02-25","dueDate":"2026-02-27","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-sd-wan-priv-E6e8tEdF.html ; https://nvd.nist.gov/vuln/detail/CVE-2022-20775"},{"cveID":"CVE-2026-20127","vendorProject":"Cisco","product":"Catalyst SD-WAN Controller and Manager","vulnerabilityName":"Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability","dateAdded":"2026-02-25","dueDate":"2026-02-27","requiredAction":"Please adhere to CISA’s guidelines to assess exposure and mitigate risks associated with Cisco SD-WAN devices as outlines in CISA’s Emergency Directive 26-03 (URL listed below in Notes) and CISA’s “Hunt & Hardening Guidance for Cisco SD-WAN Devices (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-26-03-mitigate-vulnerabilities-cisco-sd-wan-systems ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-26-03-hunt-and-hardening-guidance-cisco-sd-wan-systems ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-rpa-EHchtZk ; https://nvd.nist.gov/vuln/detail/CVE-2026-20127"},{"cveID":"CVE-2026-25108","vendorProject":"Soliton Systems K.K","product":"FileZen","vulnerabilityName":"Soliton Systems K.K FileZen OS Command Injection Vulnerability","dateAdded":"2026-02-24","dueDate":"2026-03-17","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://jvn.jp/en/jp/JVN84622767/ ; https://nvd.nist.gov/vuln/detail/CVE-2026-25108"},{"cveID":"CVE-2025-49113","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-02-20","dueDate":"2026-03-13","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10 ; https://github.com/roundcube/roundcubemail/releases/tag/1.5.10 ; https://github.com/roundcube/roundcubemail/releases/tag/1.6.11 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49113"},{"cveID":"CVE-2025-68461","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Cross-site Scripting Vulnerability","dateAdded":"2026-02-20","dueDate":"2026-03-13","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12 ; https://github.com/roundcube/roundcubemail/commit/bfa032631c36b900e7444dfa278340b33cbf7cdb ; https://nvd.nist.gov/vuln/detail/CVE-2025-68461"},{"cveID":"CVE-2021-22175","vendorProject":"GitLab","product":"GitLab","vulnerabilityName":"GitLab Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-02-18","dueDate":"2026-03-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22175.json ; https://nvd.nist.gov/vuln/detail/CVE-2021-22175"},{"cveID":"CVE-2026-22769","vendorProject":"Dell","product":"RecoverPoint for Virtual Machines (RP4VMs)","vulnerabilityName":"Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability","dateAdded":"2026-02-18","dueDate":"2026-02-21","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.dell.com/support/kbdoc/en-us/000426773/dsa-2026-079 ; https://www.dell.com/support/kbdoc/en-us/000426742/recoverpoint-for-vms-apply-the-remediation-script-for-dsa ; https://cloud.google.com/blog/topics/threat-intelligence/unc6201-exploiting-dell-recoverpoint-zero-day ; https://nvd.nist.gov/vuln/detail/CVE-2026-22769"},{"cveID":"CVE-2020-7796","vendorProject":"Synacor","product":"Zimbra Collaboration Suite","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P7 ; https://nvd.nist.gov/vuln/detail/CVE-2020-7796"},{"cveID":"CVE-2024-7694","vendorProject":"TeamT5","product":"ThreatSonar Anti-Ransomware","vulnerabilityName":"TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://teamt5.org/en/posts/vulnerability-notice-threat-sonar-anti-ransomware-20240715/ ; https://www.twcert.org.tw/en/cp-139-8000-e5a5c-2.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-7694"},{"cveID":"CVE-2008-0015","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":" Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://web.archive.org/web/20110305211119/https://www.microsoft.com/technet/security/bulletin/ms09-032.mspx ; https://nvd.nist.gov/vuln/detail/CVE-2008-0015"},{"cveID":"CVE-2026-2441","vendorProject":"Google","product":"Chromium","vulnerabilityName":"Google Chromium CSS Use-After-Free Vulnerability","dateAdded":"2026-02-17","dueDate":"2026-03-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2026/02/stable-channel-update-for-desktop_13.html ; https://nvd.nist.gov/vuln/detail/CVE-2026-2441"},{"cveID":"CVE-2026-1731","vendorProject":"BeyondTrust","product":"Remote Support (RS) and Privileged Remote Access (PRA)","vulnerabilityName":"BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability","dateAdded":"2026-02-13","dueDate":"2026-02-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to the vendor's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible BeyondTrust products affected by this vulnerability. For more information please: see: https://www.beyondtrust.com/trust-center/security-advisories/bt26-02 ; https://nvd.nist.gov/vuln/detail/CVE-2026-1731"},{"cveID":"CVE-2026-20700","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Buffer Overflow Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-03-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/126346 ; https://support.apple.com/en-us/126348 ; https://support.apple.com/en-us/126351 ; https://support.apple.com/en-us/126352 ; https://support.apple.com/en-us/126353 ; https://nvd.nist.gov/vuln/detail/CVE-2026-20700"},{"cveID":"CVE-2024-43468","vendorProject":"Microsoft","product":"Configuration Manager","vulnerabilityName":"Microsoft Configuration Manager SQL Injection Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-03-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43468 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43468"},{"cveID":"CVE-2025-15556","vendorProject":"Notepad++","product":"Notepad++","vulnerabilityName":"Notepad++ Download of Code Without Integrity Check Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-03-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://notepad-plus-plus.org/news/clarification-security-incident/ ; https://community.notepad-plus-plus.org/topic/27298/notepad-v8-8-9-vulnerability-fix ; https://nvd.nist.gov/vuln/detail/CVE-2025-15556"},{"cveID":"CVE-2025-40536","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Security Control Bypass Vulnerability","dateAdded":"2026-02-12","dueDate":"2026-02-15","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://documentation.solarwinds.com/en/success_center/whd/content/release_notes/whd_2026-1_release_notes.htm ; https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40536 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40536"},{"cveID":"CVE-2026-21513","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/advisory/CVE-2026-21513 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21513"},{"cveID":"CVE-2026-21525","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NULL Pointer Dereference Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21525 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21525"},{"cveID":"CVE-2026-21510","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Shell Protection Mechanism Failure Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21510 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21510 "},{"cveID":"CVE-2026-21533","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Improper Privilege Management Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21533 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21533"},{"cveID":"CVE-2026-21519","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Type Confusion Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21519 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21519"},{"cveID":"CVE-2026-21514","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability","dateAdded":"2026-02-10","dueDate":"2026-03-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21514 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21514"},{"cveID":"CVE-2025-11953","vendorProject":"React Native Community","product":"CLI","vulnerabilityName":"React Native Community CLI OS Command Injection Vulnerability","dateAdded":"2026-02-05","dueDate":"2026-02-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/react-native-community/cli/commit/15089907d1f1301b22c72d7f68846a2ef20df547 ; https://github.com/react-native-community/cli/pull/2735 ; https://nvd.nist.gov/vuln/detail/CVE-2025-11953"},{"cveID":"CVE-2026-24423","vendorProject":"SmarterTools","product":"SmarterMail","vulnerabilityName":"SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability","dateAdded":"2026-02-05","dueDate":"2026-02-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.smartertools.com/smartermail/release-notes/current ; https://www.cve.org/CVERecord?id=CVE-2026-24423 ; https://nvd.nist.gov/vuln/detail/CVE-2026-24423"},{"cveID":"CVE-2021-39935","vendorProject":"GitLab","product":"Community and Enterprise Editions","vulnerabilityName":"GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://about.gitlab.com/releases/2021/12/06/security-release-gitlab-14-5-2-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2021-39935"},{"cveID":"CVE-2025-64328","vendorProject":"Sangoma","product":"FreePBX ","vulnerabilityName":"Sangoma FreePBX OS Command Injection Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/FreePBX/security-reporting/security/advisories/GHSA-vm9p-46mv-5xvw ; https://nvd.nist.gov/vuln/detail/CVE-2025-64328"},{"cveID":"CVE-2019-19006","vendorProject":"Sangoma","product":"FreePBX","vulnerabilityName":" Sangoma FreePBX Improper Authentication Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.freepbx.org/display/FOP/2019-11-20%2BRemote%2BAdmin%2BAuthentication%2BBypass ; https://nvd.nist.gov/vuln/detail/CVE-2019-19006"},{"cveID":"CVE-2025-40551","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2026-02-03","dueDate":"2026-02-06","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40551 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40551"},{"cveID":"CVE-2026-1281","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","dateAdded":"2026-01-29","dueDate":"2026-02-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Ivanti's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Ivanti products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as possible. For more information please: see: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM-CVE-2026-1281-CVE-2026-1340 ; https://support.mobileiron.com/mi/vsp/AB1771634/ivanti-security-update-1761642-1.0.0S-5.noarch.rpm ; https://support.mobileiron.com/mi/vsp/AB1771634/ivanti-security-update-1761642-1.0.0L-5.noarch.rpm ; https://nvd.nist.gov/vuln/detail/CVE-2026-1281"},{"cveID":"CVE-2026-24858","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-01-27","dueDate":"2026-01-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Fortinet's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Fortinet products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://fortiguard.fortinet.com/psirt/FG-IR-26-060 ; https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios ; https://nvd.nist.gov/vuln/detail/CVE-2026-24858"},{"cveID":"CVE-2018-14634","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Integer Overflow Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634"},{"cveID":"CVE-2025-52691","vendorProject":"SmarterTools","product":"SmarterMail","vulnerabilityName":"SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.smartertools.com/smartermail/release-notes/current ; https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-124/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-52691"},{"cveID":"CVE-2026-23760","vendorProject":"SmarterTools","product":"SmarterMail","vulnerabilityName":"SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.smartertools.com/smartermail/release-notes/current ; https://nvd.nist.gov/vuln/detail/CVE-2026-23760"},{"cveID":"CVE-2026-24061","vendorProject":"GNU","product":"InetUtils","vulnerabilityName":"GNU InetUtils Argument Injection Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://cgit.git.savannah.gnu.org/cgit/inetutils.git ; https://codeberg.org/inetutils/inetutils/commit/ccba9f748aa8d50a38d7748e2e60362edd6a32cc; https://codeberg.org/inetutils/inetutils/commit/fd702c02497b2f398e739e3119bed0b23dd7aa7b ; https://nvd.nist.gov/vuln/detail/CVE-2026-24061"},{"cveID":"CVE-2026-21509","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","dateAdded":"2026-01-26","dueDate":"2026-02-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Microsoft’s recommended guidelines to address this vulnerability. Implement all final mitigations provided by the vendor for Office 2021, and apply the interim corresponding mitigations for Office 2016 and Office 2019 until the final patch becomes available. For more information please see: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21509 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21509"},{"cveID":"CVE-2024-37079","vendorProject":"Broadcom","product":"VMware vCenter Server","vulnerabilityName":"Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability","dateAdded":"2026-01-23","dueDate":"2026-02-13","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24453 ; https://nvd.nist.gov/vuln/detail/CVE-2024-37079"},{"cveID":"CVE-2025-68645","vendorProject":"Synacor","product":" Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-68645"},{"cveID":"CVE-2025-34026","vendorProject":"Versa","product":"Concerto","vulnerabilityName":"Versa Concerto Improper Authentication Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://security-portal.versa-networks.com/emailbulletins/6830f94328defa375486ff2e ; https://nvd.nist.gov/vuln/detail/CVE-2025-34026"},{"cveID":"CVE-2025-31125","vendorProject":"Vite","product":"Vitejs","vulnerabilityName":"Vite Vitejs Improper Access Control Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/vitejs/vite/commit/59673137c45ac2bcfad1170d954347c1a17ab949 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31125"},{"cveID":"CVE-2025-54313","vendorProject":"Prettier","product":"eslint-config-prettier","vulnerabilityName":"Prettier eslint-config-prettier Embedded Malicious Code Vulnerability","dateAdded":"2026-01-22","dueDate":"2026-02-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.npmjs.com/package/eslint-config-prettier?activeTab=versions ; https://github.com/prettier/eslint-config-prettier/issues/339#issuecomment-3090304490 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54313"},{"cveID":"CVE-2026-20045","vendorProject":"Cisco","product":"Unified Communications Manager","vulnerabilityName":"Cisco Unified Communications Products Code Injection Vulnerability","dateAdded":"2026-01-21","dueDate":"2026-02-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-voice-rce-mORhqY4b ; https://nvd.nist.gov/vuln/detail/CVE-2026-20045"},{"cveID":"CVE-2026-20805","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Information Disclosure Vulnerability","dateAdded":"2026-01-13","dueDate":"2026-02-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-20805 ; https://nvd.nist.gov/vuln/detail/CVE-2026-20805"},{"cveID":"CVE-2025-8110","vendorProject":"Gogs","product":"Gogs","vulnerabilityName":"Gogs Path Traversal Vulnerability","dateAdded":"2026-01-12","dueDate":"2026-02-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/gogs/gogs/commit/553707f3fd5f68f47f531cfcff56aa3ec294c6f6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8110"},{"cveID":"CVE-2009-0556","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office PowerPoint Code Injection Vulnerability","dateAdded":"2026-01-07","dueDate":"2026-01-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-017 ; https://nvd.nist.gov/vuln/detail/CVE-2009-0556"},{"cveID":"CVE-2025-37164","vendorProject":"Hewlett Packard Enterprise (HPE)","product":"OneView","vulnerabilityName":"Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability","dateAdded":"2026-01-07","dueDate":"2026-01-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-37164"},{"cveID":"CVE-2025-14847","vendorProject":"MongoDB","product":"MongoDB and MongoDB Server","vulnerabilityName":"MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability","dateAdded":"2025-12-29","dueDate":"2026-01-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://jira.mongodb.org/browse/SERVER-115508 ; https://nvd.nist.gov/vuln/detail/CVE-2025-14847"},{"cveID":"CVE-2023-52163","vendorProject":"Digiever","product":"DS-2105 Pro","vulnerabilityName":"Digiever DS-2105 Pro Missing Authorization Vulnerability","dateAdded":"2025-12-22","dueDate":"2026-01-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.digiever.com/tw/support/faq-content.php?FAQ=217 ; https://nvd.nist.gov/vuln/detail/CVE-2023-52163"},{"cveID":"CVE-2025-14733","vendorProject":"WatchGuard","product":"Firebox","vulnerabilityName":"WatchGuard Firebox Out of Bounds Write Vulnerability","dateAdded":"2025-12-19","dueDate":"2025-12-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Check for signs of potential compromise on all internet accessible instances after applying mitigations. For more information please see: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00027 ; https://nvd.nist.gov/vuln/detail/CVE-2025-14733"},{"cveID":"CVE-2025-59374","vendorProject":"ASUS","product":"Live Update","vulnerabilityName":"ASUS Live Update Embedded Malicious Code Vulnerability","dateAdded":"2025-12-17","dueDate":"2026-01-07","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.asus.com/support/faq/1018727/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-59374"},{"cveID":"CVE-2025-40602","vendorProject":"SonicWall","product":"SMA1000 appliance","vulnerabilityName":"SonicWall SMA1000 Missing Authorization Vulnerability","dateAdded":"2025-12-17","dueDate":"2025-12-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable","notes":"Check for signs of potential compromise on all internet accessible SonicWall SMA1000 instances after applying mitigations. For more information please see: https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0019 ; https://nvd.nist.gov/vuln/detail/CVE-2025-40602"},{"cveID":"CVE-2025-20393","vendorProject":"Cisco","product":"Multiple Products","vulnerabilityName":"Cisco Multiple Products Improper Input Validation Vulnerability","dateAdded":"2025-12-17","dueDate":"2025-12-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Cisco's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Cisco products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-attack-N9bf4 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20393"},{"cveID":"CVE-2025-59718","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","dateAdded":"2025-12-16","dueDate":"2025-12-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-647 ; https://docs.fortinet.com/upgrade-tool/fortigate ; https://nvd.nist.gov/vuln/detail/CVE-2025-59718"},{"cveID":"CVE-2025-14611","vendorProject":"Gladinet","product":"CentreStack and Triofox","vulnerabilityName":"Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability","dateAdded":"2025-12-15","dueDate":"2026-01-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.centrestack.com/p/gce_latest_release.html ; https://access.triofox.com/releases_history/; https://support.centrestack.com/hc/en-us/articles/360007159054-Hardening-the-CentreStack-Cluster#h_01JQRV57T37HJFQZKBZH9NBXQP ; https://nvd.nist.gov/vuln/detail/CVE-2025-14611"},{"cveID":"CVE-2025-43529","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Use-After-Free WebKit Vulnerability","dateAdded":"2025-12-15","dueDate":"2026-01-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/125884 ; https://support.apple.com/en-us/125892 ; https://support.apple.com/en-us/125885 ; https://support.apple.com/en-us/125886 ; https://support.apple.com/en-us/125889 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43529"},{"cveID":"CVE-2018-4063","vendorProject":"Sierra Wireless","product":"AirLink ALEOS","vulnerabilityName":"Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2025-12-12","dueDate":"2026-01-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.cisa.gov/news-events/ics-advisories/icsa-19-122-03 ; https://source.sierrawireless.com/resources/airlink/software_reference_docs/technical-bulletin/sierra-wireless-technical-bulletin---swi-psa-2019-003 ; https://source.sierrawireless.com/resources/airlink/hardware_reference_docs/airlink_es450_eol ; https://nvd.nist.gov/vuln/detail/CVE-2018-4063"},{"cveID":"CVE-2025-14174","vendorProject":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Out of Bounds Memory Access Vulnerability","dateAdded":"2025-12-12","dueDate":"2026-01-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/12/stable-channel-update-for-desktop_10.html ; https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security ; https://nvd.nist.gov/vuln/detail/CVE-2025-14174"},{"cveID":"CVE-2025-58360","vendorProject":"OSGeo","product":"GeoServer","vulnerabilityName":"OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability","dateAdded":"2025-12-11","dueDate":"2026-01-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects an open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525 ; https://osgeo-org.atlassian.net/browse/GEOS-11922 ; https://nvd.nist.gov/vuln/detail/CVE-2025-58360"},{"cveID":"CVE-2025-6218","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Path Traversal Vulnerability","dateAdded":"2025-12-09","dueDate":"2025-12-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=276&cHash=b5165454d983fc9717bc8748901a64f9 ; https://nvd.nist.gov/vuln/detail/CVE-2025-6218"},{"cveID":"CVE-2025-62221","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Use After Free Vulnerability","dateAdded":"2025-12-09","dueDate":"2025-12-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-62221 ; https://nvd.nist.gov/vuln/detail/CVE-2025-62221"},{"cveID":"CVE-2022-37055","vendorProject":"D-Link","product":"Routers","vulnerabilityName":"D-Link Routers Buffer Overflow Vulnerability","dateAdded":"2025-12-08","dueDate":"2025-12-29","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10308 ; https://nvd.nist.gov/vuln/detail/CVE-2022-37055"},{"cveID":"CVE-2025-66644","vendorProject":"Array Networks ","product":"ArrayOS AG","vulnerabilityName":"Array Networks ArrayOS AG OS Command Injection Vulnerability","dateAdded":"2025-12-08","dueDate":"2025-12-29","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/ag.html ; https://www.jpcert.or.jp/at/2025/at250024.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-66644"},{"cveID":"CVE-2025-55182","vendorProject":"Meta","product":"React Server Components","vulnerabilityName":"Meta React Server Components Remote Code Execution Vulnerability","dateAdded":"2025-12-05","dueDate":"2025-12-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Check for signs of potential compromise on all internet accessible REACT instances after applying mitigations. For more information, please see: https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components ; https://github.com/vercel-labs/fix-react2shell-next?tab=readme-ov-file ; https://nvd.nist.gov/vuln/detail/CVE-2025-55182"},{"cveID":"CVE-2021-26828","vendorProject":"OpenPLC","product":"ScadaBR","vulnerabilityName":"OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability","dateAdded":"2025-12-03","dueDate":"2025-12-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/SCADA-LTS/Scada-LTS/pull/2174 ; https://nvd.nist.gov/vuln/detail/CVE-2021-26828"},{"cveID":"CVE-2025-48633","vendorProject":"Android","product":"Framework","vulnerabilityName":"Android Framework Information Disclosure Vulnerability","dateAdded":"2025-12-02","dueDate":"2025-12-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/2025-12-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48633"},{"cveID":"CVE-2025-48572","vendorProject":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2025-12-02","dueDate":"2025-12-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/2025-12-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48572"},{"cveID":"CVE-2021-26829","vendorProject":"OpenPLC","product":"ScadaBR","vulnerabilityName":"OpenPLC ScadaBR Cross-site Scripting Vulnerability","dateAdded":"2025-11-28","dueDate":"2025-12-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/SCADA-LTS/Scada-LTS/pull/3211 ; https://nvd.nist.gov/vuln/detail/CVE-2021-26829"},{"cveID":"CVE-2025-61757","vendorProject":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability","dateAdded":"2025-11-21","dueDate":"2025-12-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpuoct2025.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61757"},{"cveID":"CVE-2025-13223","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2025-11-19","dueDate":"2025-12-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-13223"},{"cveID":"CVE-2025-58034","vendorProject":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb OS Command Injection Vulnerability","dateAdded":"2025-11-18","dueDate":"2025-11-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-513 ; https://nvd.nist.gov/vuln/detail/CVE-2025-58034"},{"cveID":"CVE-2025-64446","vendorProject":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb Path Traversal Vulnerability","dateAdded":"2025-11-14","dueDate":"2025-11-21","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortiguard.com/psirt/FG-IR-25-910 ; https://nvd.nist.gov/vuln/detail/CVE-2025-64446"},{"cveID":"CVE-2025-12480","vendorProject":"Gladinet","product":"Triofox","vulnerabilityName":"Gladinet Triofox Improper Access Control Vulnerability","dateAdded":"2025-11-12","dueDate":"2025-12-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://access.triofox.com/releases_history ; https://nvd.nist.gov/vuln/detail/CVE-2025-12480"},{"cveID":"CVE-2025-62215","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Race Condition Vulnerability","dateAdded":"2025-11-12","dueDate":"2025-12-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-62215 ; https://nvd.nist.gov/vuln/detail/CVE-2025-62215"},{"cveID":"CVE-2025-9242","vendorProject":"WatchGuard","product":"Firebox","vulnerabilityName":"WatchGuard Firebox Out-of-Bounds Write Vulnerability","dateAdded":"2025-11-12","dueDate":"2025-12-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00015 ; https://nvd.nist.gov/vuln/detail/CVE-2025-9242"},{"cveID":"CVE-2025-21042","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","dateAdded":"2025-11-10","dueDate":"2025-12-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=04 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21042"},{"cveID":"CVE-2025-48703","vendorProject":"CWP","product":"Control Web Panel","vulnerabilityName":"CWP Control Web Panel OS Command Injection Vulnerability","dateAdded":"2025-11-04","dueDate":"2025-11-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://control-webpanel.com/changelog ; https://nvd.nist.gov/vuln/detail/CVE-2025-48703"},{"cveID":"CVE-2025-11371","vendorProject":"Gladinet","product":"CentreStack and Triofox","vulnerabilityName":"Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability","dateAdded":"2025-11-04","dueDate":"2025-11-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.centrestack.com/p/gce_latest_release.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-11371"},{"cveID":"CVE-2025-41244","vendorProject":"Broadcom","product":"VMware Aria Operations and VMware Tools","vulnerabilityName":"Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability","dateAdded":"2025-10-30","dueDate":"2025-11-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/36149 ; https://nvd.nist.gov/vuln/detail/CVE-2025-41244"},{"cveID":"CVE-2025-24893","vendorProject":"XWiki","product":"Platform","vulnerabilityName":"XWiki Platform Eval Injection Vulnerability","dateAdded":"2025-10-30","dueDate":"2025-11-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-rr6p-3pfg-562j ; https://nvd.nist.gov/vuln/detail/CVE-2025-24893"},{"cveID":"CVE-2025-6204","vendorProject":"Dassault Systèmes","product":"DELMIA Apriso","vulnerabilityName":"Dassault Systèmes DELMIA Apriso Code Injection Vulnerability","dateAdded":"2025-10-28","dueDate":"2025-11-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6204 ; https://nvd.nist.gov/vuln/detail/CVE-2025-6204"},{"cveID":"CVE-2025-6205","vendorProject":"Dassault Systèmes","product":"DELMIA Apriso","vulnerabilityName":"Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability","dateAdded":"2025-10-28","dueDate":"2025-11-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6205 ; https://nvd.nist.gov/vuln/detail/CVE-2025-6205"},{"cveID":"CVE-2025-54236","vendorProject":"Adobe","product":"Commerce and Magento","vulnerabilityName":"Adobe Commerce and Magento Improper Input Validation Vulnerability","dateAdded":"2025-10-24","dueDate":"2025-11-14","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://experienceleague.adobe.com/en/docs/experience-cloud-kcs/kbarticles/ka-27397 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54236"},{"cveID":"CVE-2025-59287","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-10-24","dueDate":"2025-11-14","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59287 ; https://nvd.nist.gov/vuln/detail/CVE-2025-59287"},{"cveID":"CVE-2025-61932","vendorProject":"Motex","product":"LANSCOPE Endpoint Manager","vulnerabilityName":"Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability","dateAdded":"2025-10-22","dueDate":"2025-11-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.motex.co.jp/news/notice/2025/release251020/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-61932"},{"cveID":"CVE-2022-48503","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Unspecified Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213340 ; https://support.apple.com/en-us/HT213341 ; https://support.apple.com/en-us/HT213342 ; https://support.apple.com/en-us/HT213345 ; https://support.apple.com/en-us/HT213346 ; https://nvd.nist.gov/vuln/detail/CVE-2022-48503"},{"cveID":"CVE-2025-2746","vendorProject":"Kentico","product":"Xperience CMS","vulnerabilityName":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://devnet.kentico.com/download/hotfixes ; https://nvd.nist.gov/vuln/detail/CVE-2025-2746"},{"cveID":"CVE-2025-2747","vendorProject":"Kentico","product":"Xperience CMS","vulnerabilityName":"Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://devnet.kentico.com/download/hotfixes ; https://nvd.nist.gov/vuln/detail/CVE-2025-2747"},{"cveID":"CVE-2025-33073","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SMB Client Improper Access Control Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-33073 ; https://nvd.nist.gov/vuln/detail/CVE-2025-33073"},{"cveID":"CVE-2025-61884","vendorProject":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2025-10-20","dueDate":"2025-11-10","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/alert-cve-2025-61884.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61884"},{"cveID":"CVE-2025-54253","vendorProject":"Adobe","product":"Experience Manager (AEM) Forms","vulnerabilityName":"Adobe Experience Manager Forms Code Execution Vulnerability","dateAdded":"2025-10-15","dueDate":"2025-11-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/aem-forms/apsb25-82.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-54253"},{"cveID":"CVE-2025-47827","vendorProject":"IGEL","product":"IGEL OS","vulnerabilityName":"IGEL OS Use of a Key Past its Expiration Date Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827 ; https://nvd.nist.gov/vuln/detail/CVE-2025-47827"},{"cveID":"CVE-2025-24990","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Untrusted Pointer Dereference Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24990 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24990"},{"cveID":"CVE-2025-59230","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Improper Access Control Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-59230 ; https://nvd.nist.gov/vuln/detail/CVE-2025-59230"},{"cveID":"CVE-2016-7836","vendorProject":"SKYSEA","product":"Client View","vulnerabilityName":"SKYSEA Client View Improper Authentication Vulnerability","dateAdded":"2025-10-14","dueDate":"2025-11-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.skyseaclientview.net/news/161221/ ; https://nvd.nist.gov/vuln/detail/CVE-2016-7836"},{"cveID":"CVE-2021-43798","vendorProject":"Grafana Labs","product":"Grafana","vulnerabilityName":"Grafana Path Traversal Vulnerability","dateAdded":"2025-10-09","dueDate":"2025-10-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/ ; https://nvd.nist.gov/vuln/detail/CVE-2021-43798"},{"cveID":"CVE-2025-27915","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability","dateAdded":"2025-10-07","dueDate":"2025-10-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2025-27915"},{"cveID":"CVE-2021-22555","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Heap Out-of-Bounds Write Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=9fa492cdc160cd27ce1046cb36f47d3b2b1efa21 ; https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/net/netfilter/x_tables.c?id=b29c457a6511435960115c0f548c4360d5f4801d ; https://security.netapp.com/advisory/ntap-20210805-0010/ ; https://github.com/google/security-research/security/advisories/GHSA-xxx5-8mvq-3528 ; https://nvd.nist.gov/vuln/detail/CVE-2021-22555"},{"cveID":"CVE-2010-3962","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/SecurityAdvisories/2010/2458511?redirectedfrom=MSDN ; https://nvd.nist.gov/vuln/detail/CVE-2010-3962"},{"cveID":"CVE-2021-43226","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43226 ; https://nvd.nist.gov/vuln/detail/CVE-2021-43226"},{"cveID":"CVE-2013-3918","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Out-of-Bounds Write Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-090 ; https://nvd.nist.gov/vuln/detail/CVE-2013-3918"},{"cveID":"CVE-2011-3402","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-087 ; https://nvd.nist.gov/vuln/detail/CVE-2011-3402"},{"cveID":"CVE-2010-3765","vendorProject":"Mozilla","product":"Multiple Products","vulnerabilityName":"Mozilla Multiple Products Remote Code Execution Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2010-73 ; https://nvd.nist.gov/vuln/detail/CVE-2010-3765"},{"cveID":"CVE-2025-61882","vendorProject":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Unspecified Vulnerability","dateAdded":"2025-10-06","dueDate":"2025-10-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/alert-cve-2025-61882.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-61882"},{"cveID":"CVE-2014-6278","vendorProject":"GNU","product":"GNU Bash","vulnerabilityName":"GNU Bash OS Command Injection Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. ","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-027 ; https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23467 ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140926-bash ; https://www.ibm.com/support/pages/security-bulletin-update-vulnerabilities-bash-affect-aix-toolbox-linux-applications-cve-2014-6271-cve-2014-6277-cve-2014-6278-cve-2014-7169-cve-2014-7186-and-cve-2014-7187 ; https://nvd.nist.gov/vuln/detail/CVE-2014-6278"},{"cveID":"CVE-2017-1000353","vendorProject":"Jenkins","product":"Jenkins","vulnerabilityName":"Jenkins Remote Code Execution Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.jenkins.io/security/advisory/2017-04-26/ ; https://nvd.nist.gov/vuln/detail/CVE-2017-1000353"},{"cveID":"CVE-2015-7755","vendorProject":"Juniper","product":"ScreenOS","vulnerabilityName":"Juniper ScreenOS Improper Authentication Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2015-12-Out-of-Cycle-Security-Bulletin-ScreenOS-Multiple-Security-issues-with-ScreenOS-CVE-2015-7755-CVE-2015-7756 ; https://nvd.nist.gov/vuln/detail/CVE-2015-7755"},{"cveID":"CVE-2025-21043","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Out-of-Bounds Write Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=09 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21043"},{"cveID":"CVE-2025-4008","vendorProject":"Smartbedded","product":"Meteobridge","vulnerabilityName":"Smartbedded Meteobridge Command Injection Vulnerability","dateAdded":"2025-10-02","dueDate":"2025-10-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://forum.meteohub.de/viewtopic.php?t=18687 ; https://nvd.nist.gov/vuln/detail/CVE-2025-4008"},{"cveID":"CVE-2025-32463","vendorProject":"Sudo","product":"Sudo","vulnerabilityName":"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://www.sudo.ws/security/advisories/chroot_bug/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-32463"},{"cveID":"CVE-2025-59689","vendorProject":"Libraesva","product":"Email Security Gateway","vulnerabilityName":"Libraesva Email Security Gateway Command Injection Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://docs.libraesva.com/knowledgebase/security-advisory-command-injection-vulnerability-cve-2025-59689/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-59689"},{"cveID":"CVE-2025-10035","vendorProject":"Fortra","product":"GoAnywhere MFT","vulnerabilityName":"Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortra.com/security/advisories/product-security/fi-2025-012 ; https://nvd.nist.gov/vuln/detail/CVE-2025-10035"},{"cveID":"CVE-2025-20352","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-x4LPhte ; https://nvd.nist.gov/vuln/detail/CVE-2025-20352"},{"cveID":"CVE-2021-21311","vendorProject":"Adminer","product":"Adminer","vulnerabilityName":"Adminer Server-Side Request Forgery Vulnerability","dateAdded":"2025-09-29","dueDate":"2025-10-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6 ; https://nvd.nist.gov/vuln/detail/CVE-2021-21311"},{"cveID":"CVE-2025-20362","vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","vulnerabilityName":"Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability","dateAdded":"2025-09-25","dueDate":"2025-09-26","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ;   https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-YROOTUW ; https://nvd.nist.gov/vuln/detail/CVE-2025-20362"},{"cveID":"CVE-2025-20333","vendorProject":"Cisco","product":"Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense","vulnerabilityName":"Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability","dateAdded":"2025-09-25","dueDate":"2025-09-26","requiredAction":"The KEV due date refers to the deadline by which FCEB agencies are expected to review and begin implementing the guidance outlined in Emergency Directive (ED) 25-03 (URL listed below in Notes). Agencies must follow the mitigation steps provided by CISA (URL listed below in Notes) and vendor’s instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/directives/ed-25-03-identify-and-mitigate-potential-compromise-cisco-devices ; https://www.cisa.gov/news-events/directives/supplemental-direction-ed-25-03-core-dump-and-hunt-instructions ; https://www.cisa.gov/eviction-strategies-tool/create-from-template ; https://sec.cloudapps.cisco.com/security/center/resources/asa_ftd_continued_attacks ;    https://sec.cloudapps.cisco.com/security/center/private/resources/asa_ftd_continued_attacks#Details ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-webvpn-z5xP8EUB ; https://nvd.nist.gov/vuln/detail/CVE-2025-20333"},{"cveID":"CVE-2025-10585","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2025-09-23","dueDate":"2025-10-14","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-10585"},{"cveID":"CVE-2025-5086","vendorProject":"Dassault Systèmes","product":"DELMIA Apriso","vulnerabilityName":"Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-09-11","dueDate":"2025-10-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.3ds.com/trust-center/security/security-advisories/cve-2025-5086 ; https://nvd.nist.gov/vuln/detail/CVE-2025-5086"},{"cveID":"CVE-2025-38352","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability","dateAdded":"2025-09-04","dueDate":"2025-09-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2c72fe18cc5f9f1750f5bc148cf1c94c29e106ff ; https://source.android.com/docs/security/bulletin/2025-09-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-38352"},{"cveID":"CVE-2025-48543","vendorProject":"Android","product":"Runtime","vulnerabilityName":"Android Runtime Use-After-Free Vulnerability","dateAdded":"2025-09-04","dueDate":"2025-09-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/2025-09-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48543"},{"cveID":"CVE-2025-53690","vendorProject":"Sitecore","product":"Multiple Products","vulnerabilityName":"Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-09-04","dueDate":"2025-09-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003865 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53690"},{"cveID":"CVE-2023-50224","vendorProject":"TP-Link","product":"TL-WR841N","vulnerabilityName":"TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability","dateAdded":"2025-09-03","dueDate":"2025-09-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.tp-link.com/us/support/faq/4308/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-50224"},{"cveID":"CVE-2025-9377","vendorProject":"TP-Link","product":"Multiple Routers","vulnerabilityName":"TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability","dateAdded":"2025-09-03","dueDate":"2025-09-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.tp-link.com/us/support/faq/4308/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-9377"},{"cveID":"CVE-2020-24363","vendorProject":"TP-Link","product":"TL-WA855RE","vulnerabilityName":"TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability","dateAdded":"2025-09-02","dueDate":"2025-09-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.tp-link.com/us/home-networking/range-extender/tl-wa855re/#overview ; https://www.tp-link.com/us/support/download/tl-wa855re/#FAQs ; https://nvd.nist.gov/vuln/detail/CVE-2020-24363"},{"cveID":"CVE-2025-55177","vendorProject":"Meta Platforms","product":"WhatsApp","vulnerabilityName":"Meta Platforms WhatsApp Incorrect Authorization Vulnerability","dateAdded":"2025-09-02","dueDate":"2025-09-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.whatsapp.com/security/advisories/2025/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-55177"},{"cveID":"CVE-2025-57819","vendorProject":"Sangoma","product":"FreePBX","vulnerabilityName":"Sangoma FreePBX Authentication Bypass Vulnerability","dateAdded":"2025-08-29","dueDate":"2025-09-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h ; https://nvd.nist.gov/vuln/detail/CVE-2025-57819"},{"cveID":"CVE-2025-7775","vendorProject":"Citrix","product":"NetScaler","vulnerabilityName":"Citrix NetScaler Memory Overflow Vulnerability","dateAdded":"2025-08-26","dueDate":"2025-08-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938 ; https://nvd.nist.gov/vuln/detail/CVE-2025-7775"},{"cveID":"CVE-2025-48384","vendorProject":"Git","product":"Git","vulnerabilityName":"Git Link Following Vulnerability","dateAdded":"2025-08-25","dueDate":"2025-09-15","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9 ; https://access.redhat.com/errata/RHSA-2025:13933 ; https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html ; https://linux.oracle.com/errata/ELSA-2025-11534.html ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384 ; https://nvd.nist.gov/vuln/detail/CVE-2025-48384"},{"cveID":"CVE-2024-8068","vendorProject":"Citrix","product":"Session Recording","vulnerabilityName":"Citrix Session Recording Improper Privilege Management Vulnerability","dateAdded":"2025-08-25","dueDate":"2025-09-15","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-8068"},{"cveID":"CVE-2024-8069","vendorProject":"Citrix","product":"Session Recording","vulnerabilityName":"Citrix Session Recording Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-08-25","dueDate":"2025-09-15","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-8069"},{"cveID":"CVE-2025-43300","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2025-08-21","dueDate":"2025-09-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/124925 ; https://support.apple.com/en-us/124926 ; https://support.apple.com/en-us/124927 ; https://support.apple.com/en-us/124928 ; https://support.apple.com/en-us/124929 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43300"},{"cveID":"CVE-2025-54948","vendorProject":"Trend Micro","product":"Apex One","vulnerabilityName":"Trend Micro Apex One OS Command Injection Vulnerability","dateAdded":"2025-08-18","dueDate":"2025-09-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://success.trendmicro.com/en-US/solution/KA-0020652 ; N/A ; https://nvd.nist.gov/vuln/detail/CVE-2025-54948"},{"cveID":"CVE-2025-8876","vendorProject":"N-able","product":"N-Central","vulnerabilityName":"N-able N-Central Command Injection Vulnerability","dateAdded":"2025-08-13","dueDate":"2025-08-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-8876"},{"cveID":"CVE-2025-8875","vendorProject":"N-able","product":"N-Central","vulnerabilityName":"N-able N-Central Insecure Deserialization Vulnerability","dateAdded":"2025-08-13","dueDate":"2025-08-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://status.n-able.com/2025/08/13/announcing-the-ga-of-n-central-2025-3-1/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-8875"},{"cveID":"CVE-2025-8088","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Path Traversal Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=283&cHash=a64b4a8f662d3639dec8d65f47bc93c5 ; https://nvd.nist.gov/vuln/detail/CVE-2025-8088"},{"cveID":"CVE-2007-0671","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Excel Remote Code Execution Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-015 ; https://nvd.nist.gov/vuln/detail/CVE-2007-0671"},{"cveID":"CVE-2013-3893","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Resource Management Errors Vulnerability","dateAdded":"2025-08-12","dueDate":"2025-09-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-080 ; https://nvd.nist.gov/vuln/detail/CVE-2013-3893"},{"cveID":"CVE-2020-25078","vendorProject":"D-Link","product":"DCS-2530L and DCS-2670L Devices","vulnerabilityName":"D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability","dateAdded":"2025-08-05","dueDate":"2025-08-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.dlink.com/productinfo.aspx?m=DCS-2530L ; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 ; https://nvd.nist.gov/vuln/detail/CVE-2020-25078"},{"cveID":"CVE-2020-25079","vendorProject":"D-Link","product":"DCS-2530L and DCS-2670L Devices","vulnerabilityName":"D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability","dateAdded":"2025-08-05","dueDate":"2025-08-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.dlink.com/productinfo.aspx?m=DCS-2530L ; https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10180 ; https://nvd.nist.gov/vuln/detail/CVE-2020-25079"},{"cveID":"CVE-2022-40799","vendorProject":"D-Link","product":"DNR-322L","vulnerabilityName":"D-Link DNR-322L Download of Code Without Integrity Check Vulnerability","dateAdded":"2025-08-05","dueDate":"2025-08-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.dlink.com/uk/en/products/dnr-322l-cloud-network-video-recorder ; https://nvd.nist.gov/vuln/detail/CVE-2022-40799"},{"cveID":"CVE-2023-2533","vendorProject":"PaperCut","product":"NG/MF","vulnerabilityName":"PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.papercut.com/kb/Main/SecurityBulletinJune2023 ; https://nvd.nist.gov/vuln/detail/CVE-2023-2533"},{"cveID":"CVE-2025-20337","vendorProject":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Injection Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20337"},{"cveID":"CVE-2025-20281","vendorProject":"Cisco","product":"Identity Services Engine","vulnerabilityName":"Cisco Identity Services Engine Injection Vulnerability","dateAdded":"2025-07-28","dueDate":"2025-08-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-unauth-rce-ZAd2GnJ6 ; https://nvd.nist.gov/vuln/detail/CVE-2025-20281"},{"cveID":"CVE-2025-2775","vendorProject":"SysAid","product":"SysAid On-Prem","vulnerabilityName":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://documentation.sysaid.com/docs/24-40-60 ; https://nvd.nist.gov/vuln/detail/CVE-2025-2775"},{"cveID":"CVE-2025-2776","vendorProject":"SysAid","product":"SysAid On-Prem","vulnerabilityName":"SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://documentation.sysaid.com/docs/24-40-60 ; https://nvd.nist.gov/vuln/detail/CVE-2025-2776"},{"cveID":"CVE-2025-6558","vendorProject":"Google","product":"Chromium","vulnerabilityName":"Google Chromium ANGLE and GPU Improper Input Validation Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_15.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-6558"},{"cveID":"CVE-2025-54309","vendorProject":"CrushFTP","product":"CrushFTP","vulnerabilityName":" CrushFTP Unprotected Alternate Channel Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-08-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.crushftp.com/crush11wiki/Wiki.jsp?page=CompromiseJuly2025 ; https://nvd.nist.gov/vuln/detail/CVE-2025-54309 "},{"cveID":"CVE-2025-49704","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Code Injection Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-07-23","requiredAction":"Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49704 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49704"},{"cveID":"CVE-2025-49706","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Improper Authentication Vulnerability","dateAdded":"2025-07-22","dueDate":"2025-07-23","requiredAction":"Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770 ; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49706 ; https://nvd.nist.gov/vuln/detail/CVE-2025-49706"},{"cveID":"CVE-2025-53770","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-07-20","dueDate":"2025-07-21","requiredAction":"Disconnect public-facing versions of SharePoint Server that have reached their end-of-life (EOL) or end-of-service (EOS) to include SharePoint Server 2013 and earlier versions. For supported versions, please follow the mitigations according to CISA (URL listed below in Notes) and vendor instructions (URL listed below in Notes). Adhere to the applicable BOD 22-01 guidance for cloud services or discontinue use of the product if mitigations are not available.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/07/20/microsoft-releases-guidance-exploitation-sharepoint-vulnerability-cve-2025-53770; https://www.microsoft.com/en-us/security/blog/2025/07/22/disrupting-active-exploitation-of-on-premises-sharepoint-vulnerabilities/ ; https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53770 ; https://nvd.nist.gov/vuln/detail/CVE-2025-53770"},{"cveID":"CVE-2025-25257","vendorProject":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb SQL Injection Vulnerability","dateAdded":"2025-07-18","dueDate":"2025-08-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-151 ; https://nvd.nist.gov/vuln/detail/CVE-2025-25257"},{"cveID":"CVE-2025-47812","vendorProject":"Wing FTP Server","product":"Wing FTP Server","vulnerabilityName":"Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability","dateAdded":"2025-07-14","dueDate":"2025-08-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.wftpserver.com/serverhistory.htm ; https://nvd.nist.gov/vuln/detail/CVE-2025-47812"},{"cveID":"CVE-2025-5777","vendorProject":"Citrix","product":"NetScaler ADC and Gateway","vulnerabilityName":"Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability","dateAdded":"2025-07-10","dueDate":"2025-07-11","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX693420 ; https://nvd.nist.gov/vuln/detail/CVE-2025-5777"},{"cveID":"CVE-2019-9621","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://wiki.zimbra.com/wiki/Security_Center ; https://nvd.nist.gov/vuln/detail/CVE-2019-9621"},{"cveID":"CVE-2019-5418","vendorProject":"Rails","product":"Ruby on Rails","vulnerabilityName":"Rails Ruby on Rails Path Traversal Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://web.archive.org/web/20190313201629/https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-5418"},{"cveID":"CVE-2016-10033","vendorProject":"PHP","product":"PHPMailer","vulnerabilityName":"PHPMailer Command Injection Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/PHPMailer/PHPMailer/releases/tag/v5.2.18 ; https://github.com/advisories/GHSA-5f37-gxvh-23v6 ; https://nvd.nist.gov/vuln/detail/CVE-2016-10033"},{"cveID":"CVE-2014-3931","vendorProject":"Looking Glass","product":"Multi-Router Looking Glass (MRLG)","vulnerabilityName":"Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability","dateAdded":"2025-07-07","dueDate":"2025-07-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://mrlg.op-sec.us/ ; https://nvd.nist.gov/vuln/detail/CVE-2014-3931"},{"cveID":"CVE-2025-6554","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2025-07-02","dueDate":"2025-07-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_30.html?m=1 ; https://nvd.nist.gov/vuln/detail/CVE-2025-6554"},{"cveID":"CVE-2025-48928","vendorProject":"TeleMessage","product":"TM SGNL","vulnerabilityName":"TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability","dateAdded":"2025-07-01","dueDate":"2025-07-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"It is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-48928"},{"cveID":"CVE-2025-48927","vendorProject":"TeleMessage","product":"TM SGNL","vulnerabilityName":"TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability","dateAdded":"2025-07-01","dueDate":"2025-07-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"It is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-48927"},{"cveID":"CVE-2025-6543","vendorProject":"Citrix","product":"NetScaler ADC and Gateway","vulnerabilityName":"Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability","dateAdded":"2025-06-30","dueDate":"2025-07-21","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694788 ; https://www.netscaler.com/blog/news/netscaler-critical-security-updates-for-cve-2025-6543-and-cve-2025-5777/ ;   https://nvd.nist.gov/vuln/detail/CVE-2025-6543"},{"cveID":"CVE-2019-6693","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.com/advisory/FG-IR-19-007 ; https://nvd.nist.gov/vuln/detail/CVE-2019-6693"},{"cveID":"CVE-2024-0769","vendorProject":"D-Link","product":"DIR-859 Router","vulnerabilityName":" D-Link DIR-859 Router Path Traversal Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10371 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0769"},{"cveID":"CVE-2024-54085","vendorProject":"AMI","product":"MegaRAC SPx","vulnerabilityName":"AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://go.ami.com/hubfs/Security%20Advisories/2025/AMI-SA-2025003.pdf ; https://security.netapp.com/advisory/ntap-20250328-0003/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-54085"},{"cveID":"CVE-2023-0386","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Ownership Management Vulnerability","dateAdded":"2025-06-17","dueDate":"2025-07-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f11ada10d0a ; https://access.redhat.com/security/cve/cve-2023-0386 ; https://security.netapp.com/advisory/ntap-20230420-0004/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-0386"},{"cveID":"CVE-2023-33538","vendorProject":"TP-Link","product":"Multiple Routers","vulnerabilityName":"TP-Link Multiple Routers Command Injection Vulnerability","dateAdded":"2025-06-16","dueDate":"2025-07-07","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.tp-link.com/nordic/support/faq/3562/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-33538"},{"cveID":"CVE-2025-43200","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Unspecified Vulnerability","dateAdded":"2025-06-16","dueDate":"2025-07-07","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/122174 ; https://support.apple.com/en-us/122173 ; https://support.apple.com/en-us/122900 ; https://support.apple.com/en-us/122901 ; https://support.apple.com/en-us/122902 ; https://support.apple.com/en-us/122903 ; https://support.apple.com/en-us/122904 ; https://nvd.nist.gov/vuln/detail/CVE-2025-43200"},{"cveID":"CVE-2025-33053","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":" Microsoft Windows External Control of File Name or Path Vulnerability","dateAdded":"2025-06-10","dueDate":"2025-07-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-33053 ; https://nvd.nist.gov/vuln/detail/CVE-2025-33053"},{"cveID":"CVE-2025-24016","vendorProject":"Wazuh","product":"Wazuh Server","vulnerabilityName":"Wazuh Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2025-06-10","dueDate":"2025-07-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wazuh.com/blog/addressing-the-cve-2025-24016-vulnerability/ ; https://github.com/wazuh/wazuh/security/advisories/GHSA-hcrc-79hj-m3qh ; https://nvd.nist.gov/vuln/detail/CVE-2025-24016"},{"cveID":"CVE-2024-42009","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Cross-Site Scripting Vulnerability","dateAdded":"2025-06-09","dueDate":"2025-06-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://roundcube.net/news/2024/08/04/security-updates-1.6.8-and-1.5.8 ; https://nvd.nist.gov/vuln/detail/CVE-2024-42009"},{"cveID":"CVE-2025-32433","vendorProject":"Erlang","product":"Erlang/OTP","vulnerabilityName":"Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability","dateAdded":"2025-06-09","dueDate":"2025-06-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 ; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-erlang-otp-ssh-xyZZy ; https://nvd.nist.gov/vuln/detail/CVE-2025-32433"},{"cveID":"CVE-2025-5419","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read and Write Vulnerability","dateAdded":"2025-06-05","dueDate":"2025-06-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html;   https://nvd.nist.gov/vuln/detail/CVE-2025-5419\","},{"cveID":"CVE-2025-21479","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","dateAdded":"2025-06-03","dueDate":"2025-06-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html ;   https://nvd.nist.gov/vuln/detail/CVE-2025-21479"},{"cveID":"CVE-2025-21480","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability","dateAdded":"2025-06-03","dueDate":"2025-06-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html ;   https://nvd.nist.gov/vuln/detail/CVE-2025-21480"},{"cveID":"CVE-2025-27038","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2025-06-03","dueDate":"2025-06-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please check with specific vendors (OEMs,) for information on patching status. For more information, please see: https://docs.qualcomm.com/product/publicresources/securitybulletin/june-2025-bulletin.html ;   https://nvd.nist.gov/vuln/detail/CVE-2025-27038"},{"cveID":"CVE-2021-32030","vendorProject":"ASUS","product":"Routers","vulnerabilityName":"ASUS Routers Improper Authentication Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/ ; https://www.asus.com/us/supportonly/rog%20rapture%20gt-ac2900/helpdesk_bios/; https://nvd.nist.gov/vuln/detail/CVE-2021-32030"},{"cveID":"CVE-2025-3935","vendorProject":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Improper Authentication Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.connectwise.com/company/trust/security-bulletins/screenconnect-security-patch-2025.4 ;   https://nvd.nist.gov/vuln/detail/CVE-2025-3935"},{"cveID":"CVE-2025-35939","vendorProject":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/craftcms/cms/pull/17220 ;   https://nvd.nist.gov/vuln/detail/CVE-2025-35939"},{"cveID":"CVE-2024-56145","vendorProject":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS Code Injection Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/craftcms/cms/security/advisories/GHSA-2p6p-9rc9-62j9 ; https://nvd.nist.gov/vuln/detail/CVE-2024-56145"},{"cveID":"CVE-2023-39780","vendorProject":"ASUS","product":"RT-AX55 Routers","vulnerabilityName":"ASUS RT-AX55 Routers OS Command Injection Vulnerability","dateAdded":"2025-06-02","dueDate":"2025-06-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.asus.com/networking-iot-servers/wifi-6/all-series/rt-ax55/helpdesk_bios/?model2Name=RT-AX55 ;   https://www.asus.com/content/asus-product-security-advisory/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-39780"},{"cveID":"CVE-2025-4632","vendorProject":"Samsung","product":"MagicINFO 9 Server","vulnerabilityName":"Samsung MagicINFO 9 Server Path Traversal Vulnerability","dateAdded":"2025-05-22","dueDate":"2025-06-12","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://security.samsungtv.com/securityUpdates#SVP-MAY-2025 ; https://nvd.nist.gov/vuln/detail/CVE-2025-4632"},{"cveID":"CVE-2023-38950","vendorProject":"ZKTeco","product":"BioTime","vulnerabilityName":"ZKTeco BioTime Path Traversal Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.zkteco.com/en/Security_Bulletinsibs ; https://nvd.nist.gov/vuln/detail/CVE-2023-38950"},{"cveID":"CVE-2024-27443","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P46#Security_Fixes ; https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P39#Security_Fixes ; https://wiki.zimbra.com/wiki/Zimbra_Releases/10.0.7#Security_Fixes ; https://nvd.nist.gov/vuln/detail/CVE-2024-27443"},{"cveID":"CVE-2025-27920","vendorProject":"Srimax","product":"Output Messenger","vulnerabilityName":"Srimax Output Messenger Directory Traversal Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.outputmessenger.com/cve-2025-27920/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-27920"},{"cveID":"CVE-2024-11182","vendorProject":"MDaemon","product":"Email Server","vulnerabilityName":"MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://files.mdaemon.com/mdaemon/beta/RelNotes_en.html ; https://mdaemon.com/pages/downloads-critical-updates ; https://nvd.nist.gov/vuln/detail/CVE-2024-11182"},{"cveID":"CVE-2025-4428","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM ; https://nvd.nist.gov/vuln/detail/CVE-2025-4428"},{"cveID":"CVE-2025-4427","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability","dateAdded":"2025-05-19","dueDate":"2025-06-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM ; https://nvd.nist.gov/vuln/detail/CVE-2025-4427"},{"cveID":"CVE-2025-42999","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Deserialization Vulnerability","dateAdded":"2025-05-15","dueDate":"2025-06-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"SAP users must have an account to log in and access the patch: https://me.sap.com/notes/3604119 ; https://nvd.nist.gov/vuln/detail/CVE-2025-42999"},{"cveID":"CVE-2024-12987","vendorProject":"DrayTek","product":"Vigor Routers","vulnerabilityName":"DrayTek Vigor Routers OS Command Injection Vulnerability","dateAdded":"2025-05-15","dueDate":"2025-06-05","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fw.draytek.com.tw/Vigor2960/Firmware/v1.5.1.5/DrayTek_Vigor2960_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor300B/Firmware/v1.5.1.5/DrayTek_Vigor300B_V1.5.1.5_01release-note.pdf ; https://fw.draytek.com.tw/Vigor3900/Firmware/v1.5.1.5/DrayTek_Vigor3900_V1.5.1.5_01release-note.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-12987"},{"cveID":"CVE-2025-32756","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-05-14","dueDate":"2025-06-04","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-254 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32756"},{"cveID":"CVE-2025-32709","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-32709 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32709"},{"cveID":"CVE-2025-30397","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Engine Type Confusion Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-30397 ; https://nvd.nist.gov/vuln/detail/CVE-2025-30397"},{"cveID":"CVE-2025-32706","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-32706 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32706"},{"cveID":"CVE-2025-32701","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-32701 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32701"},{"cveID":"CVE-2025-30400","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows DWM Core Library Use-After-Free Vulnerability","dateAdded":"2025-05-13","dueDate":"2025-06-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-30400 ; https://nvd.nist.gov/vuln/detail/CVE-2025-30400"},{"cveID":"CVE-2025-47729","vendorProject":"TeleMessage","product":"TM SGNL","vulnerabilityName":"TeleMessage TM SGNL Hidden Functionality Vulnerability","dateAdded":"2025-05-12","dueDate":"2025-06-02","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Apply mitigations per vendor instructions. Absent mitigating instructions from the vendor, discontinue use of the product. ; https://nvd.nist.gov/vuln/detail/CVE-2025-47729"},{"cveID":"CVE-2024-11120","vendorProject":"GeoVision","product":"Multiple Devices","vulnerabilityName":"GeoVision Devices OS Command Injection Vulnerability","dateAdded":"2025-05-07","dueDate":"2025-05-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-11120"},{"cveID":"CVE-2024-6047","vendorProject":"GeoVision","product":"Multiple Devices","vulnerabilityName":"GeoVision Devices OS Command Injection Vulnerability","dateAdded":"2025-05-07","dueDate":"2025-05-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://dlcdn.geovision.com.tw/TechNotice/CyberSecurity/Security_Advisory_IP_Device_2024-11.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-6047"},{"cveID":"CVE-2025-27363","vendorProject":"FreeType","product":"FreeType","vulnerabilityName":"FreeType Out-of-Bounds Write Vulnerability","dateAdded":"2025-05-06","dueDate":"2025-05-27","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://source.android.com/docs/security/bulletin/2025-05-01 ; https://nvd.nist.gov/vuln/detail/CVE-2025-27363"},{"cveID":"CVE-2025-3248","vendorProject":"Langflow","product":"Langflow","vulnerabilityName":"Langflow Missing Authentication Vulnerability","dateAdded":"2025-05-05","dueDate":"2025-05-26","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: https://github.com/advisories/GHSA-c995-4fw3-j39m ; https://nvd.nist.gov/vuln/detail/CVE-2025-3248"},{"cveID":"CVE-2025-34028","vendorProject":"Commvault","product":"Command Center","vulnerabilityName":"Commvault Command Center Path Traversal Vulnerability","dateAdded":"2025-05-02","dueDate":"2025-05-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://documentation.commvault.com/securityadvisories/CV_2025_04_1.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-34028"},{"cveID":"CVE-2024-58136","vendorProject":"Yiiframework","product":"Yii","vulnerabilityName":"Yiiframework Yii Improper Protection of Alternate Path Vulnerability","dateAdded":"2025-05-02","dueDate":"2025-05-23","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://www.yiiframework.com/news/709/please-upgrade-to-yii-2-0-52 ; https://nvd.nist.gov/vuln/detail/CVE-2024-58136"},{"cveID":"CVE-2024-38475","vendorProject":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Improper Escaping of Output Vulnerability","dateAdded":"2025-05-01","dueDate":"2025-05-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://httpd.apache.org/security/vulnerabilities_24.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-38475"},{"cveID":"CVE-2023-44221","vendorProject":"SonicWall","product":"SMA100 Appliances","vulnerabilityName":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","dateAdded":"2025-05-01","dueDate":"2025-05-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018 ; https://nvd.nist.gov/vuln/detail/CVE-2023-44221"},{"cveID":"CVE-2025-31324","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Unrestricted File Upload Vulnerability","dateAdded":"2025-04-29","dueDate":"2025-05-20","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://me.sap.com/notes/3594142 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31324"},{"cveID":"CVE-2025-1976","vendorProject":"Broadcom","product":"Brocade Fabric OS","vulnerabilityName":"Broadcom Brocade Fabric OS Code Injection Vulnerability","dateAdded":"2025-04-28","dueDate":"2025-05-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25602 ; https://nvd.nist.gov/vuln/detail/CVE-2025-1976"},{"cveID":"CVE-2025-42599","vendorProject":"Qualitia","product":"Active! Mail","vulnerabilityName":"Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-04-28","dueDate":"2025-05-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.qualitia.com/jp/news/2025/04/18_1030.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-42599"},{"cveID":"CVE-2025-3928","vendorProject":"Commvault","product":"Web Server","vulnerabilityName":"Commvault Web Server Unspecified Vulnerability","dateAdded":"2025-04-28","dueDate":"2025-05-19","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://documentation.commvault.com/securityadvisories/CV_2025_03_1.html;   https://www.commvault.com/blogs/notice-security-advisory-update;   https://nvd.nist.gov/vuln/detail/CVE-2025-3928      "},{"cveID":"CVE-2025-24054","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability","dateAdded":"2025-04-17","dueDate":"2025-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-24054 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24054"},{"cveID":"CVE-2025-31201","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Arbitrary Read and Write Vulnerability","dateAdded":"2025-04-17","dueDate":"2025-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/122282 ; https://support.apple.com/en-us/122400 ; https://support.apple.com/en-us/122401 ; https://support.apple.com/en-us/122402 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31201"},{"cveID":"CVE-2025-31200","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2025-04-17","dueDate":"2025-05-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/122282 ; https://support.apple.com/en-us/122400 ; https://support.apple.com/en-us/122401 ; https://support.apple.com/en-us/122402 ; https://nvd.nist.gov/vuln/detail/CVE-2025-31200"},{"cveID":"CVE-2021-20035","vendorProject":"SonicWall","product":"SMA100 Appliances","vulnerabilityName":"SonicWall SMA100 Appliances OS Command Injection Vulnerability","dateAdded":"2025-04-16","dueDate":"2025-05-07","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0022 ; https://nvd.nist.gov/vuln/detail/CVE-2021-20035"},{"cveID":"CVE-2024-53150","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Read Vulnerability","dateAdded":"2025-04-09","dueDate":"2025-04-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024122427-CVE-2024-53150-3a7d@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53150"},{"cveID":"CVE-2024-53197","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Access Vulnerability","dateAdded":"2025-04-09","dueDate":"2025-04-30","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024122725-CVE-2024-53197-6aef@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53197"},{"cveID":"CVE-2025-29824","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability","dateAdded":"2025-04-08","dueDate":"2025-04-29","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-29824 ; https://nvd.nist.gov/vuln/detail/CVE-2025-29824"},{"cveID":"CVE-2025-30406","vendorProject":"Gladinet","product":"CentreStack","vulnerabilityName":"Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability","dateAdded":"2025-04-08","dueDate":"2025-04-29","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://gladinetsupport.s3.us-east-1.amazonaws.com/gladinet/securityadvisory-cve-2005.pdf ; https://gladinetsupport.s3.us-east-1.amazonaws.com/gladinet/securityadvisory-cve-2025-triofox.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2025-30406"},{"cveID":"CVE-2025-31161","vendorProject":"CrushFTP","product":"CrushFTP","vulnerabilityName":"CrushFTP Authentication Bypass Vulnerability","dateAdded":"2025-04-07","dueDate":"2025-04-28","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update ; https://nvd.nist.gov/vuln/detail/CVE-2025-31161"},{"cveID":"CVE-2025-22457","vendorProject":"Ivanti","product":"Connect Secure, Policy Secure, and ZTA Gateways","vulnerabilityName":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-04-04","dueDate":"2025-04-11","requiredAction":"Apply mitigations as set forth in the CISA instructions linked below.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-cve-2025-22457 ; Additional References: https://forums.ivanti.com/s/article/April-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-22457 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22457"},{"cveID":"CVE-2025-24813","vendorProject":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Path Equivalence Vulnerability","dateAdded":"2025-04-01","dueDate":"2025-04-22","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/j5fkjv2k477os90nczf2v9l61fb0kkgq ; https://nvd.nist.gov/vuln/detail/CVE-2025-24813"},{"cveID":"CVE-2024-20439","vendorProject":"Cisco","product":"Smart Licensing Utility","vulnerabilityName":"Cisco Smart Licensing Utility Static Credential Vulnerability","dateAdded":"2025-03-31","dueDate":"2025-04-21","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cslu-7gHMzWmw ; https://nvd.nist.gov/vuln/detail/CVE-2024-20439"},{"cveID":"CVE-2025-2783","vendorProject":"Google","product":"Chromium Mojo","vulnerabilityName":"Google Chromium Mojo Sandbox Escape Vulnerability","dateAdded":"2025-03-27","dueDate":"2025-04-17","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-2783"},{"cveID":"CVE-2019-9875","vendorProject":"Sitecore","product":"CMS and Experience Platform (XP)","vulnerabilityName":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","dateAdded":"2025-03-26","dueDate":"2025-04-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0038556 ; https://nvd.nist.gov/vuln/detail/CVE-2019-9875"},{"cveID":"CVE-2019-9874","vendorProject":"Sitecore","product":"CMS and Experience Platform (XP)","vulnerabilityName":"Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability","dateAdded":"2025-03-26","dueDate":"2025-04-16","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB0334035 ; https://nvd.nist.gov/vuln/detail/CVE-2019-9874"},{"cveID":"CVE-2025-30154","vendorProject":"reviewdog","product":"action-setup GitHub Action","vulnerabilityName":"reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability","dateAdded":"2025-03-24","dueDate":"2025-04-14","requiredAction":"Apply mitigations as set forth in the CISA instructions linked below. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/03/18/supply-chain-compromise-third-party-tj-actionschanged-files-cve-2025-30066-and-reviewdogaction ; Additional References: https://github.com/reviewdog/reviewdog/security/advisories/GHSA-qmg3-hpqr-gqvc ; https://nvd.nist.gov/vuln/detail/CVE-2025-30154"},{"cveID":"CVE-2017-12637","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Directory Traversal Vulnerability","dateAdded":"2025-03-19","dueDate":"2025-04-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"SAP users must have an account to log in and access the patch: https://me.sap.com/notes/3476549 ; https://nvd.nist.gov/vuln/detail/CVE-2017-12637"},{"cveID":"CVE-2024-48248","vendorProject":"NAKIVO","product":"Backup and Replication","vulnerabilityName":"NAKIVO Backup and Replication Absolute Path Traversal Vulnerability","dateAdded":"2025-03-19","dueDate":"2025-04-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm ; https://nvd.nist.gov/vuln/detail/CVE-2024-48248"},{"cveID":"CVE-2025-1316","vendorProject":"Edimax","product":"IC-7100 IP Camera","vulnerabilityName":"Edimax IC-7100 IP Camera OS Command Injection Vulnerability","dateAdded":"2025-03-19","dueDate":"2025-04-09","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.edimax.com/edimax/post/post/data/edimax/global/press_releases/4801/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-1316"},{"cveID":"CVE-2025-30066","vendorProject":"tj-actions","product":"changed-files GitHub Action","vulnerabilityName":"tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability","dateAdded":"2025-03-18","dueDate":"2025-04-08","requiredAction":"Apply mitigations as set forth in the CISA instructions linked below. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source project, third-party library, or a protocol used by different products. For more information, please see: CISA Mitigation Instructions: https://www.cisa.gov/news-events/alerts/2025/03/18/supply-chain-compromise-third-party-tj-actionschanged-files-cve-2025-30066-and-reviewdogaction ; Additional References: https://github.com/tj-actions/changed-files/blob/45fb12d7a8bedb4da42342e52fe054c6c2c3fd73/README.md?plain=1#L20-L28 ; https://nvd.nist.gov/vuln/detail/CVE-2025-30066"},{"cveID":"CVE-2025-24472","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","dateAdded":"2025-03-18","dueDate":"2025-04-08","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24472"},{"cveID":"CVE-2025-21590","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability","dateAdded":"2025-03-13","dueDate":"2025-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2025-03-Out-of-Cycle-Security-Bulletin-Junos-OS-A-local-attacker-with-shell-access-can-execute-arbitrary-code-CVE-2025-21590?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2025-21590"},{"cveID":"CVE-2025-24201","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability","dateAdded":"2025-03-13","dueDate":"2025-04-03","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/122281 ; https://support.apple.com/en-us/122283 ; https://support.apple.com/en-us/122284 ; https://support.apple.com/en-us/122285 ; ; https://nvd.nist.gov/vuln/detail/CVE-2025-24201"},{"cveID":"CVE-2025-24993","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24993 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24993"},{"cveID":"CVE-2025-24991","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24991 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24991"},{"cveID":"CVE-2025-24985","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24985 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24985"},{"cveID":"CVE-2025-24984","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Information Disclosure Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24984 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24984"},{"cveID":"CVE-2025-24983","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Win32k Use-After-Free Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-24983 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24983"},{"cveID":"CVE-2025-26633","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability","dateAdded":"2025-03-11","dueDate":"2025-04-01","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-26633 ; https://nvd.nist.gov/vuln/detail/CVE-2025-26633"},{"cveID":"CVE-2024-13161","vendorProject":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13161"},{"cveID":"CVE-2024-13160","vendorProject":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13160"},{"cveID":"CVE-2024-13159","vendorProject":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-13159"},{"cveID":"CVE-2024-57968","vendorProject":"Advantive","product":"VeraCore","vulnerabilityName":"Advantive VeraCore Unrestricted File Upload Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://advantive.my.site.com/support/s/article/VeraCore-Release-Notes-2024-4-2-1 ; https://nvd.nist.gov/vuln/detail/CVE-2024-57968"},{"cveID":"CVE-2025-25181","vendorProject":"Advantive","product":"VeraCore","vulnerabilityName":" Advantive VeraCore SQL Injection Vulnerability","dateAdded":"2025-03-10","dueDate":"2025-03-31","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://advantive.my.site.com/support/s/article/Veracore-Release-Notes-2025-1-1-3 ; https://nvd.nist.gov/vuln/detail/CVE-2025-25181"},{"cveID":"CVE-2025-22226","vendorProject":"VMware","product":"ESXi, Workstation, and Fusion","vulnerabilityName":"VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22226"},{"cveID":"CVE-2025-22225","vendorProject":"VMware","product":"ESXi","vulnerabilityName":"VMware ESXi Arbitrary Write Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22225"},{"cveID":"CVE-2025-22224","vendorProject":"VMware","product":"ESXi and Workstation","vulnerabilityName":"VMware ESXi and Workstation TOCTOU Race Condition Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25390 ; https://nvd.nist.gov/vuln/detail/CVE-2025-22224"},{"cveID":"CVE-2024-50302","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use of Uninitialized Resource Vulnerability","dateAdded":"2025-03-04","dueDate":"2025-03-25","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024111908-CVE-2024-50302-f677@gregkh/ ; https://source.android.com/docs/security/bulletin/2025-03-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-50302"},{"cveID":"CVE-2024-4885","vendorProject":"Progress","product":"WhatsUp Gold","vulnerabilityName":"Progress WhatsUp Gold Path Traversal Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-June-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-4885"},{"cveID":"CVE-2018-8639","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-8639 ; https://nvd.nist.gov/vuln/detail/CVE-2018-8639"},{"cveID":"CVE-2022-43769","vendorProject":"Hitachi Vantara","product":"Pentaho Business Analytics (BA) Server","vulnerabilityName":"Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.pentaho.com/hc/en-us/articles/14455561548301--Resolved-Pentaho-BA-Server-Failure-to-Sanitize-Special-Elements-into-a-Different-Plane-Special-Element-Injection-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43769 ; https://nvd.nist.gov/vuln/detail/CVE-2022-43769"},{"cveID":"CVE-2022-43939","vendorProject":"Hitachi Vantara","product":"Pentaho Business Analytics (BA) Server","vulnerabilityName":"Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://support.pentaho.com/hc/en-us/articles/14455394120333--Resolved-Pentaho-BA-Server-Use-of-Non-Canonical-URL-Paths-for-Authorization-Decisions-Versions-before-9-4-0-1-and-9-3-0-2-including-8-3-x-Impacted-CVE-2022-43939- ; https://nvd.nist.gov/vuln/detail/CVE-2022-43939"},{"cveID":"CVE-2023-20118","vendorProject":"Cisco","product":"Small Business RV Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Command Injection Vulnerability","dateAdded":"2025-03-03","dueDate":"2025-03-24","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 ; https://nvd.nist.gov/vuln/detail/CVE-2023-20118"},{"cveID":"CVE-2023-34192","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-02-25","dueDate":"2025-03-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2023-34192"},{"cveID":"CVE-2024-49035","vendorProject":"Microsoft","product":"Partner Center","vulnerabilityName":"Microsoft Partner Center Improper Access Control Vulnerability","dateAdded":"2025-02-25","dueDate":"2025-03-18","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49035 ; https://nvd.nist.gov/vuln/detail/CVE-2024-49035"},{"cveID":"CVE-2024-20953","vendorProject":"Oracle","product":"Agile Product Lifecycle Management (PLM)","vulnerabilityName":"Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability","dateAdded":"2025-02-24","dueDate":"2025-03-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpujan2024.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-20953"},{"cveID":"CVE-2017-3066","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization Vulnerability","dateAdded":"2025-02-24","dueDate":"2025-03-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb17-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2017-3066"},{"cveID":"CVE-2025-24989","vendorProject":"Microsoft","product":"Power Pages","vulnerabilityName":"Microsoft Power Pages Improper Access Control Vulnerability","dateAdded":"2025-02-21","dueDate":"2025-03-14","requiredAction":"Apply mitigations per vendor instructions, follow BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-24989 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24989"},{"cveID":"CVE-2025-0111","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS File Read Vulnerability","dateAdded":"2025-02-20","dueDate":"2025-03-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/CVE-2025-0111 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0111"},{"cveID":"CVE-2025-23209","vendorProject":"Craft CMS","product":"Craft CMS","vulnerabilityName":"Craft CMS Code Injection Vulnerability","dateAdded":"2025-02-20","dueDate":"2025-03-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/craftcms/cms/security/advisories/GHSA-x684-96hh-833x ; https://nvd.nist.gov/vuln/detail/CVE-2025-23209"},{"cveID":"CVE-2025-0108","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","dateAdded":"2025-02-18","dueDate":"2025-03-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/CVE-2025-0108 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0108"},{"cveID":"CVE-2024-53704","vendorProject":"SonicWall","product":"SonicOS","vulnerabilityName":"SonicWall SonicOS SSLVPN Improper Authentication Vulnerability","dateAdded":"2025-02-18","dueDate":"2025-03-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0003 ; https://nvd.nist.gov/vuln/detail/CVE-2024-53704"},{"cveID":"CVE-2024-57727","vendorProject":"SimpleHelp ","product":"SimpleHelp","vulnerabilityName":"SimpleHelp Path Traversal Vulnerability","dateAdded":"2025-02-13","dueDate":"2025-03-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://simple-help.com/kb---security-vulnerabilities-01-2025 ; Additional CISA Mitigation Instructions: https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-163a ; https://nvd.nist.gov/vuln/detail/CVE-2024-57727"},{"cveID":"CVE-2025-24200","vendorProject":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Incorrect Authorization Vulnerability","dateAdded":"2025-02-12","dueDate":"2025-03-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/122173 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24200"},{"cveID":"CVE-2024-41710","vendorProject":"Mitel","product":"SIP Phones","vulnerabilityName":"Mitel SIP Phones Argument Injection Vulnerability","dateAdded":"2025-02-12","dueDate":"2025-03-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.mitel.com/-/media/mitel/file/pdf/support/security-advisories/security-bulletin_24-0019-001-v2.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2024-41710"},{"cveID":"CVE-2024-40891","vendorProject":"Zyxel","product":"DSL CPE Devices","vulnerabilityName":"Zyxel DSL CPE OS Command Injection Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","requiredAction":"The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 ; https://www.zyxel.com/service-provider/global/en/security-advisories/zyxel-security-advisory-command-injection-insecure-in-certain-legacy-dsl-cpe-02-04-2025 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40891"},{"cveID":"CVE-2024-40890","vendorProject":"Zyxel","product":"DSL CPE Devices","vulnerabilityName":"Zyxel DSL CPE OS Command Injection Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","requiredAction":"The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-and-insecure-default-credentials-vulnerabilities-in-certain-legacy-dsl-cpe-02-04-2025 ; https://www.zyxel.com/service-provider/global/en/security-advisories/zyxel-security-advisory-command-injection-insecure-in-certain-legacy-dsl-cpe-02-04-2025 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40890"},{"cveID":"CVE-2025-21418","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21418 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21418"},{"cveID":"CVE-2025-21391","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Storage Link Following Vulnerability","dateAdded":"2025-02-11","dueDate":"2025-03-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21391 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21391"},{"cveID":"CVE-2025-0994","vendorProject":"Trimble","product":"Cityworks","vulnerabilityName":"Trimble Cityworks Deserialization Vulnerability","dateAdded":"2025-02-07","dueDate":"2025-02-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://learn.assetlifecycle.trimble.com/i/1532182-cityworks-customer-communication-2025-02-05-docx/0?; https://www.cisa.gov/news-events/ics-advisories/icsa-25-037-04 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0994"},{"cveID":"CVE-2020-15069","vendorProject":"Sophos","product":"XG Firewall","vulnerabilityName":"Sophos XG Firewall Buffer Overflow Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://community.sophos.com/b/security-blog/posts/advisory-buffer-overflow-vulnerability-in-user-portal ; https://nvd.nist.gov/vuln/detail/CVE-2020-15069"},{"cveID":"CVE-2020-29574","vendorProject":"Sophos","product":"CyberoamOS","vulnerabilityName":"CyberoamOS (CROS) SQL Injection Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://support.sophos.com/support/s/article/KBA-000007526 ; https://nvd.nist.gov/vuln/detail/CVE-2020-29574"},{"cveID":"CVE-2024-21413","vendorProject":"Microsoft","product":"Office Outlook","vulnerabilityName":"Microsoft Outlook Improper Input Validation Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21413 ; https://nvd.nist.gov/vuln/detail/CVE-2024-21413"},{"cveID":"CVE-2022-23748","vendorProject":"Audinate","product":"Dante Discovery","vulnerabilityName":"Dante Discovery Process Control Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.getdante.com/support/faq/audinate-response-to-dante-discovery-mdnsresponder-exe-security-issue-cve-2022-23748/ ; https://nvd.nist.gov/vuln/detail/CVE-2022-23748"},{"cveID":"CVE-2025-0411","vendorProject":"7-Zip","product":"7-Zip","vulnerabilityName":"7-Zip Mark of the Web Bypass Vulnerability","dateAdded":"2025-02-06","dueDate":"2025-02-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.7-zip.org/history.txt ; https://nvd.nist.gov/vuln/detail/CVE-2025-0411"},{"cveID":"CVE-2024-53104","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2025-02-05","dueDate":"2025-02-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://lore.kernel.org/linux-cve-announce/2024120232-CVE-2024-53104-d781@gregkh/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-53104"},{"cveID":"CVE-2018-19410","vendorProject":"Paessler","product":"PRTG Network Monitor","vulnerabilityName":"Paessler PRTG Network Monitor Local File Inclusion Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.paessler.com/prtg/history/prtg-18#18.2.41.1652 ; https://nvd.nist.gov/vuln/detail/CVE-2018-19410"},{"cveID":"CVE-2018-9276","vendorProject":"Paessler","product":"PRTG Network Monitor","vulnerabilityName":"Paessler PRTG Network Monitor OS Command Injection Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.paessler.com/prtg/history/prtg-18#18.2.39 ; https://nvd.nist.gov/vuln/detail/CVE-2018-9276"},{"cveID":"CVE-2024-29059","vendorProject":"Microsoft","product":".NET Framework","vulnerabilityName":"Microsoft .NET Framework Information Disclosure Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29059 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29059"},{"cveID":"CVE-2024-45195","vendorProject":"Apache","product":"OFBiz","vulnerabilityName":"Apache OFBiz Forced Browsing Vulnerability","dateAdded":"2025-02-04","dueDate":"2025-02-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://ofbiz.apache.org/security.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-45195"},{"cveID":"CVE-2025-24085","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Use-After-Free Vulnerability","dateAdded":"2025-01-29","dueDate":"2025-02-19","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/122066 ; https://support.apple.com/en-us/122068 ; https://support.apple.com/en-us/122071 ; https://support.apple.com/en-us/122072 ; https://support.apple.com/en-us/122073 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24085"},{"cveID":"CVE-2025-23006","vendorProject":"SonicWall","product":"SMA1000 Appliances","vulnerabilityName":"SonicWall SMA1000 Appliances Deserialization Vulnerability","dateAdded":"2025-01-24","dueDate":"2025-02-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2025-0002 ; https://nvd.nist.gov/vuln/detail/CVE-2025-23006"},{"cveID":"CVE-2020-11023","vendorProject":"JQuery","product":"JQuery","vulnerabilityName":"JQuery Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2025-01-23","dueDate":"2025-02-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6 ; https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ ; https://nvd.nist.gov/vuln/detail/CVE-2020-11023"},{"cveID":"CVE-2024-50603","vendorProject":"Aviatrix","product":"Controllers","vulnerabilityName":"Aviatrix Controllers OS Command Injection Vulnerability","dateAdded":"2025-01-16","dueDate":"2025-02-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://docs.aviatrix.com/documentation/latest/release-notices/psirt-advisories/psirt-advisories.html?expand=true ; https://nvd.nist.gov/vuln/detail/CVE-2024-50603"},{"cveID":"CVE-2025-21335","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-02-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21335 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21335"},{"cveID":"CVE-2025-21334","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-02-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21334 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21334"},{"cveID":"CVE-2025-21333","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-02-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-21333 ; https://nvd.nist.gov/vuln/detail/CVE-2025-21333"},{"cveID":"CVE-2024-55591","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-01-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55591"},{"cveID":"CVE-2023-48365","vendorProject":"Qlik","product":"Sense","vulnerabilityName":"Qlik Sense HTTP Tunneling Vulnerability","dateAdded":"2025-01-13","dueDate":"2025-02-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/tac-p/2120510 ; https://nvd.nist.gov/vuln/detail/CVE-2023-48365"},{"cveID":"CVE-2024-12686","vendorProject":"BeyondTrust","product":"Privileged Remote Access (PRA) and Remote Support (RS)","vulnerabilityName":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability","dateAdded":"2025-01-13","dueDate":"2025-02-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.beyondtrust.com/trust-center/security-advisories/bt24-11 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12686"},{"cveID":"CVE-2025-0282","vendorProject":"Ivanti","product":"Connect Secure, Policy Secure, and ZTA Gateways","vulnerabilityName":"Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-01-08","dueDate":"2025-01-15","requiredAction":"Apply mitigations as set forth in the CISA instructions linked below to include conducting hunt activities, taking remediation actions if applicable, and applying updates prior to returning a device to service.","notes":"CISA Mitigation Instructions: https://www.cisa.gov/cisa-mitigation-instructions-CVE-2025-0282 Additional References: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 ; https://nvd.nist.gov/vuln/detail/CVE-2025-0282"},{"cveID":"CVE-2020-2883","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2025-01-07","dueDate":"2025-01-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpuapr2020.html ; https://nvd.nist.gov/vuln/detail/CVE-2020-2883"},{"cveID":"CVE-2024-55550","vendorProject":"Mitel","product":"MiCollab","vulnerabilityName":"Mitel MiCollab Path Traversal Vulnerability","dateAdded":"2025-01-07","dueDate":"2025-01-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55550"},{"cveID":"CVE-2024-41713","vendorProject":"Mitel","product":"MiCollab","vulnerabilityName":"Mitel MiCollab Path Traversal Vulnerability","dateAdded":"2025-01-07","dueDate":"2025-01-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-misa-2024-0029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-41713 "},{"cveID":"CVE-2024-3393","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability","dateAdded":"2024-12-30","dueDate":"2025-01-20","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/CVE-2024-3393 ; https://nvd.nist.gov/vuln/detail/CVE-2024-3393"},{"cveID":"CVE-2021-44207","vendorProject":"Acclaim Systems","product":"USAHERDS","vulnerabilityName":"Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability ","dateAdded":"2024-12-23","dueDate":"2025-01-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Please contact the product developer for support and vulnerability mitigation.","notes":"https://www.acclaimsystems.com/#contact ; https://www.tnatc.org/#contact ; https://nvd.nist.gov/vuln/detail/CVE-2021-44207"},{"cveID":"CVE-2024-12356","vendorProject":"BeyondTrust","product":"Privileged Remote Access (PRA) and Remote Support (RS) ","vulnerabilityName":"BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability ","dateAdded":"2024-12-19","dueDate":"2024-12-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356"},{"cveID":"CVE-2021-40407","vendorProject":"Reolink","product":"RLC-410W IP Camera","vulnerabilityName":"Reolink RLC-410W IP Camera OS Command Injection Vulnerability ","dateAdded":"2024-12-18","dueDate":"2025-01-08","requiredAction":"The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.","notes":"https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2021-40407"},{"cveID":"CVE-2019-11001","vendorProject":"Reolink","product":"Multiple IP Cameras","vulnerabilityName":"Reolink Multiple IP Cameras OS Command Injection Vulnerability","dateAdded":"2024-12-18","dueDate":"2025-01-08","requiredAction":"The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization if a current mitigation is unavailable.","notes":"https://reolink.com/product-eol/ ; https://reolink.com/download-center/ ; https://nvd.nist.gov/vuln/detail/CVE-2019-11001"},{"cveID":"CVE-2022-23227","vendorProject":"NUUO","product":"NVRmini2 Devices","vulnerabilityName":"NUUO NVRmini2 Devices Missing Authentication Vulnerability ","dateAdded":"2024-12-18","dueDate":"2025-01-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter＿NVRmini-2-and-NVRsolo-series.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2022-23227"},{"cveID":"CVE-2018-14933","vendorProject":"NUUO","product":"NVRmini Devices","vulnerabilityName":"NUUO NVRmini Devices OS Command Injection Vulnerability ","dateAdded":"2024-12-18","dueDate":"2025-01-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://nuuo.com/wp-content/uploads/2023/03/NUUO-EOL-letter%EF%BC%BFNVRmini-2-and-NVRsolo-series.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2018-14933"},{"cveID":"CVE-2024-55956","vendorProject":"Cleo","product":"Multiple Products","vulnerabilityName":"Cleo Multiple Products Unauthenticated File Upload Vulnerability","dateAdded":"2024-12-17","dueDate":"2025-01-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update-CVE-2024-55956 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55956"},{"cveID":"CVE-2024-35250","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability ","dateAdded":"2024-12-16","dueDate":"2025-01-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-35250 ; https://nvd.nist.gov/vuln/detail/CVE-2024-35250"},{"cveID":"CVE-2024-20767","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2024-12-16","dueDate":"2025-01-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-20767"},{"cveID":"CVE-2024-50623","vendorProject":"Cleo","product":"Multiple Products","vulnerabilityName":"Cleo Multiple Products Unrestricted File Upload Vulnerability","dateAdded":"2024-12-13","dueDate":"2025-01-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Update ; https://nvd.nist.gov/vuln/detail/CVE-2024-50623"},{"cveID":"CVE-2024-49138","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability","dateAdded":"2024-12-10","dueDate":"2024-12-31","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49138 ; https://nvd.nist.gov/vuln/detail/CVE-2024-49138"},{"cveID":"CVE-2024-51378","vendorProject":"CyberPersons","product":"CyberPanel","vulnerabilityName":"CyberPanel Incorrect Default Permissions Vulnerability","dateAdded":"2024-12-04","dueDate":"2024-12-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://cyberpanel.net/KnowledgeBase/home/change-logs/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-51378"},{"cveID":"CVE-2024-11667","vendorProject":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls Path Traversal Vulnerability","dateAdded":"2024-12-03","dueDate":"2024-12-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-protecting-against-recent-firewall-threats-11-21-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-11667"},{"cveID":"CVE-2024-11680","vendorProject":"ProjectSend","product":"ProjectSend","vulnerabilityName":"ProjectSend Improper Authentication Vulnerability","dateAdded":"2024-12-03","dueDate":"2024-12-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/projectsend/projectsend/commit/193367d937b1a59ed5b68dd4e60bd53317473744 ; https://nvd.nist.gov/vuln/detail/CVE-2024-11680"},{"cveID":"CVE-2023-45727","vendorProject":"North Grid","product":"Proself","vulnerabilityName":"North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability","dateAdded":"2024-12-03","dueDate":"2024-12-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.proself.jp/information/153/ ; https://nvd.nist.gov/vuln/detail/CVE-2023-45727"},{"cveID":"CVE-2023-28461","vendorProject":"Array Networks ","product":"AG/vxAG ArrayOS","vulnerabilityName":"Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability","dateAdded":"2024-11-25","dueDate":"2024-12-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_Remote_Code_Execution_Vulnerability_AG.pdf ; https://nvd.nist.gov/vuln/detail/CVE-2023-28461"},{"cveID":"CVE-2024-21287","vendorProject":"Oracle","product":"Agile Product Lifecycle Management (PLM)","vulnerabilityName":"Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability","dateAdded":"2024-11-21","dueDate":"2024-12-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/alert-cve-2024-21287.html ; https://nvd.nist.gov/vuln/detail/CVE-2024-21287"},{"cveID":"CVE-2024-44309","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-11-21","dueDate":"2024-12-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44309"},{"cveID":"CVE-2024-44308","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability","dateAdded":"2024-11-21","dueDate":"2024-12-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/121752, https://support.apple.com/en-us/121753, https://support.apple.com/en-us/121754, https://support.apple.com/en-us/121755, https://support.apple.com/en-us/121756 ; https://nvd.nist.gov/vuln/detail/CVE-2024-44308"},{"cveID":"CVE-2024-38813","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Privilege Escalation Vulnerability","dateAdded":"2024-11-20","dueDate":"2024-12-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38813"},{"cveID":"CVE-2024-38812","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Heap-Based Buffer Overflow Vulnerability","dateAdded":"2024-11-20","dueDate":"2024-12-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24968 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38812"},{"cveID":"CVE-2024-9474","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability","dateAdded":"2024-11-18","dueDate":"2024-12-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, the management interfaces for affected devices should not be exposed to untrusted networks, including the internet.","notes":"https://security.paloaltonetworks.com/CVE-2024-9474 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9474"},{"cveID":"CVE-2024-0012","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability","dateAdded":"2024-11-18","dueDate":"2024-12-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Additionally, management interface for affected devices should not be exposed to untrusted networks, including the internet.","notes":"https://security.paloaltonetworks.com/CVE-2024-0012 ; https://nvd.nist.gov/vuln/detail/CVE-2024-0012"},{"cveID":"CVE-2024-1212","vendorProject":"Progress","product":"Kemp LoadMaster","vulnerabilityName":"Progress Kemp LoadMaster OS Command Injection Vulnerability","dateAdded":"2024-11-18","dueDate":"2024-12-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://community.progress.com/s/article/Release-Notice-LMOS-7-2-59-2-7-2-54-8-7-2-48-10-CVE-2024-1212 ; https://nvd.nist.gov/vuln/detail/CVE-2024-1212"},{"cveID":"CVE-2024-9465","vendorProject":"Palo Alto Networks","product":"Expedition","vulnerabilityName":"Palo Alto Networks Expedition SQL Injection Vulnerability","dateAdded":"2024-11-14","dueDate":"2024-12-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9465"},{"cveID":"CVE-2024-9463","vendorProject":"Palo Alto Networks","product":"Expedition","vulnerabilityName":"Palo Alto Networks Expedition OS Command Injection Vulnerability","dateAdded":"2024-11-14","dueDate":"2024-12-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/PAN-SA-2024-0010 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9463"},{"cveID":"CVE-2021-26086","vendorProject":"Atlassian","product":"Jira Server and Data Center","vulnerabilityName":"Atlassian Jira Server and Data Center Path Traversal Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://jira.atlassian.com/browse/JRASERVER-72695 ; https://nvd.nist.gov/vuln/detail/CVE-2021-26086"},{"cveID":"CVE-2014-2120","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-CVE-2014-2120 ; https://nvd.nist.gov/vuln/detail/CVE-2014-2120"},{"cveID":"CVE-2021-41277","vendorProject":"Metabase","product":"Metabase","vulnerabilityName":"Metabase GeoJSON API Local File Inclusion Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/metabase/metabase/security/advisories/GHSA-w73v-6p7p-fpfr ; https://nvd.nist.gov/vuln/detail/CVE-2021-41277"},{"cveID":"CVE-2024-43451","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43451 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43451"},{"cveID":"CVE-2024-49039","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Task Scheduler Privilege Escalation Vulnerability","dateAdded":"2024-11-12","dueDate":"2024-12-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039 ; https://nvd.nist.gov/vuln/detail/CVE-2024-49039"},{"cveID":"CVE-2019-16278","vendorProject":"Nostromo","product":"nhttpd","vulnerabilityName":"Nostromo nhttpd Directory Traversal Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.nazgul.ch/dev/nostromo_cl.txt ; https://nvd.nist.gov/vuln/detail/CVE-2019-16278"},{"cveID":"CVE-2024-51567","vendorProject":"CyberPersons","product":"CyberPanel","vulnerabilityName":"CyberPanel Incorrect Default Permissions Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://cyberpanel.net/blog/detials-and-fix-of-recent-security-issue-and-patch-of-cyberpanel ; https://nvd.nist.gov/vuln/detail/CVE-2024-51567"},{"cveID":"CVE-2024-43093","vendorProject":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/2024-11-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43093"},{"cveID":"CVE-2024-5910","vendorProject":"Palo Alto Networks","product":"Expedition","vulnerabilityName":"Palo Alto Networks Expedition Missing Authentication Vulnerability","dateAdded":"2024-11-07","dueDate":"2024-11-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.paloaltonetworks.com/CVE-2024-5910 ; https://nvd.nist.gov/vuln/detail/CVE-2024-5910"},{"cveID":"CVE-2024-8956","vendorProject":"PTZOptics","product":"PT30X-SDI/NDI Cameras","vulnerabilityName":"PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability","dateAdded":"2024-11-04","dueDate":"2024-11-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://ptzoptics.com/firmware-changelog/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-8956"},{"cveID":"CVE-2024-8957","vendorProject":"PTZOptics","product":"PT30X-SDI/NDI Cameras","vulnerabilityName":"PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability","dateAdded":"2024-11-04","dueDate":"2024-11-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://ptzoptics.com/firmware-changelog/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-8957"},{"cveID":"CVE-2024-37383","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-10-24","dueDate":"2024-11-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/roundcube/roundcubemail/releases/tag/1.5.7, https://github.com/roundcube/roundcubemail/releases/tag/1.6.7 ; https://nvd.nist.gov/vuln/detail/CVE-2024-37383"},{"cveID":"CVE-2024-20481","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Denial-of-Service Vulnerability","dateAdded":"2024-10-24","dueDate":"2024-11-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-bf-dos-vDZhLqrW ; https://nvd.nist.gov/vuln/detail/CVE-2024-20481"},{"cveID":"CVE-2024-47575","vendorProject":"Fortinet","product":"FortiManager","vulnerabilityName":"Fortinet FortiManager Missing Authentication Vulnerability","dateAdded":"2024-10-23","dueDate":"2024-11-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-423 ; https://nvd.nist.gov/vuln/detail/CVE-2024-47575"},{"cveID":"CVE-2024-38094","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Deserialization Vulnerability","dateAdded":"2024-10-22","dueDate":"2024-11-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38094 ; https://nvd.nist.gov/vuln/detail/CVE-2024-38094"},{"cveID":"CVE-2024-9537","vendorProject":"ScienceLogic","product":"SL1","vulnerabilityName":"ScienceLogic SL1 Unspecified Vulnerability","dateAdded":"2024-10-21","dueDate":"2024-11-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.sciencelogic.com/s/article/15527 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9537"},{"cveID":"CVE-2024-40711","vendorProject":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup and Replication Deserialization Vulnerability","dateAdded":"2024-10-17","dueDate":"2024-11-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.veeam.com/kb4649 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40711"},{"cveID":"CVE-2024-28987","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Hardcoded Credential Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28987 ; https://nvd.nist.gov/vuln/detail/CVE-2024-28987"},{"cveID":"CVE-2024-9680","vendorProject":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-9680"},{"cveID":"CVE-2024-30088","vendorProject":"Microsoft","product":"Windows ","vulnerabilityName":"Microsoft Windows Kernel TOCTOU Race Condition Vulnerability","dateAdded":"2024-10-15","dueDate":"2024-11-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-30088 ; https://nvd.nist.gov/vuln/detail/CVE-2024-30088"},{"cveID":"CVE-2024-9380","vendorProject":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerabilityName":"Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","requiredAction":"As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9380"},{"cveID":"CVE-2024-9379","vendorProject":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerabilityName":"Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","requiredAction":"As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381 ; https://nvd.nist.gov/vuln/detail/CVE-2024-9379"},{"cveID":"CVE-2024-23113","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Format String Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113"},{"cveID":"CVE-2024-43573","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","dateAdded":"2024-10-08","dueDate":"2024-10-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43573 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43573"},{"cveID":"CVE-2024-43572","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Management Console Remote Code Execution Vulnerability","dateAdded":"2024-10-08","dueDate":"2024-10-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/advisory/CVE-2024-43572 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43572"},{"cveID":"CVE-2024-43047","vendorProject":"Qualcomm","product":"Multiple Chipsets ","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2024-10-08","dueDate":"2024-10-29","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"https://git.codelinaro.org/clo/la/platform/vendor/qcom/opensource/dsp-kernel/-/commit/0e27b6c7d2bd8d0453e4465ac2ca49a8f8c440e2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43047"},{"cveID":"CVE-2024-45519","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability","dateAdded":"2024-10-03","dueDate":"2024-10-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Security_Advisories ; https://nvd.nist.gov/vuln/detail/CVE-2024-45519"},{"cveID":"CVE-2024-29824","vendorProject":"Ivanti","product":"Endpoint Manager (EPM)","vulnerabilityName":"Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability","dateAdded":"2024-10-02","dueDate":"2024-10-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-May-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29824"},{"cveID":"CVE-2019-0344","vendorProject":"SAP","product":"Commerce Cloud","vulnerabilityName":"SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-09-30","dueDate":"2024-10-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://web.archive.org/web/20191214053020/https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=523998017 ; https://nvd.nist.gov/vuln/detail/CVE-2019-0344"},{"cveID":"CVE-2020-15415","vendorProject":"DrayTek","product":"Multiple Vigor Routers","vulnerabilityName":"DrayTek Multiple Vigor Routers OS Command Injection Vulnerability","dateAdded":"2024-09-30","dueDate":"2024-10-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.draytek.com/about/security-advisory/vigor3900-/-vigor2960-/-vigor300b-remote-code-injection/execution-vulnerability-(cve-2020-14472) ; https://nvd.nist.gov/vuln/detail/CVE-2020-15415"},{"cveID":"CVE-2023-25280","vendorProject":"D-Link","product":"DIR-820 Router","vulnerabilityName":"D-Link DIR-820 Router OS Command Injection Vulnerability","dateAdded":"2024-09-30","dueDate":"2024-10-21","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10358 ; https://nvd.nist.gov/vuln/detail/CVE-2023-25280"},{"cveID":"CVE-2024-7593","vendorProject":"Ivanti","product":"Virtual Traffic Manager","vulnerabilityName":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","dateAdded":"2024-09-24","dueDate":"2024-10-15","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 ; https://nvd.nist.gov/vuln/detail/CVE-2024-7593"},{"cveID":"CVE-2024-8963","vendorProject":"Ivanti","product":"Cloud Services Appliance (CSA)","vulnerabilityName":"Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability","dateAdded":"2024-09-19","dueDate":"2024-10-10","requiredAction":"As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963 ; https://nvd.nist.gov/vuln/detail/CVE-2024-8963"},{"cveID":"CVE-2020-14644","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpujul2020.html  ;  https://nvd.nist.gov/vuln/detail/CVE-2020-14644"},{"cveID":"CVE-2022-21445","vendorProject":"Oracle","product":"ADF Faces","vulnerabilityName":"Oracle ADF Faces Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpuapr2022.html  ;  https://nvd.nist.gov/vuln/detail/CVE-2022-21445"},{"cveID":"CVE-2020-0618","vendorProject":"Microsoft","product":"SQL Server","vulnerabilityName":"Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2020-0618  ;  https://nvd.nist.gov/vuln/detail/CVE-2020-0618"},{"cveID":"CVE-2024-27348","vendorProject":"Apache","product":"HugeGraph-Server","vulnerabilityName":"Apache HugeGraph-Server Improper Access Control Vulnerability","dateAdded":"2024-09-18","dueDate":"2024-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see:  https://lists.apache.org/thread/nx6g6htyhpgtzsocybm242781o8w5kq9 ; https://nvd.nist.gov/vuln/detail/CVE-2024-27348"},{"cveID":"CVE-2014-0502","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Double Free Vulnerablity","dateAdded":"2024-09-17","dueDate":"2024-10-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0502"},{"cveID":"CVE-2013-0648","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Code Execution Vulnerability","dateAdded":"2024-09-17","dueDate":"2024-10-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0648"},{"cveID":"CVE-2013-0643","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Incorrect Default Permissions Vulnerability","dateAdded":"2024-09-17","dueDate":"2024-10-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2013-0643"},{"cveID":"CVE-2014-0497","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Underflow Vulnerablity","dateAdded":"2024-09-17","dueDate":"2024-10-08","requiredAction":"The impacted product is end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue utilization of the product.","notes":"https://www.adobe.com/products/flashplayer/end-of-life-alternative.html#eol-alternative-faq ; https://nvd.nist.gov/vuln/detail/CVE-2014-0497"},{"cveID":"CVE-2024-6670","vendorProject":"Progress","product":"WhatsUp Gold","vulnerabilityName":"Progress WhatsUp Gold SQL Injection Vulnerability","dateAdded":"2024-09-16","dueDate":"2024-10-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://community.progress.com/s/article/WhatsUp-Gold-Security-Bulletin-August-2024 ; https://nvd.nist.gov/vuln/detail/CVE-2024-6670"},{"cveID":"CVE-2024-43461","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","dateAdded":"2024-09-16","dueDate":"2024-10-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43461 ; https://nvd.nist.gov/vuln/detail/CVE-2024-43461"},{"cveID":"CVE-2024-8190","vendorProject":"Ivanti","product":"Cloud Services Appliance","vulnerabilityName":"Ivanti Cloud Services Appliance OS Command Injection Vulnerability","dateAdded":"2024-09-13","dueDate":"2024-10-04","requiredAction":"As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.","notes":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190; https://nvd.nist.gov/vuln/detail/CVE-2024-8190"},{"cveID":"CVE-2024-38217","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability","dateAdded":"2024-09-10","dueDate":"2024-10-01","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38217; https://nvd.nist.gov/vuln/detail/CVE-2024-38217"},{"cveID":"CVE-2024-38014","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Installer Improper Privilege Management Vulnerability","dateAdded":"2024-09-10","dueDate":"2024-10-01","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38014; https://nvd.nist.gov/vuln/detail/CVE-2024-38014"},{"cveID":"CVE-2024-38226","vendorProject":"Microsoft","product":"Publisher","vulnerabilityName":"Microsoft Publisher Protection Mechanism Failure Vulnerability","dateAdded":"2024-09-10","dueDate":"2024-10-01","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38226; https://nvd.nist.gov/vuln/detail/CVE-2024-38226"},{"cveID":"CVE-2024-40766","vendorProject":"SonicWall","product":"SonicOS","vulnerabilityName":"SonicWall SonicOS Improper Access Control Vulnerability","dateAdded":"2024-09-09","dueDate":"2024-09-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0015; https://www.sonicwall.com/support/notices/gen-7-and-newer-sonicwall-firewalls-sslvpn-recent-threat-activity/kA1VN0000000RDG0A2 ; https://nvd.nist.gov/vuln/detail/CVE-2024-40766"},{"cveID":"CVE-2017-1000253","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","dateAdded":"2024-09-09","dueDate":"2024-09-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a87938b2e246b81b4fb713edb371a9fa3c5c3c86; https://nvd.nist.gov/vuln/detail/CVE-2017-1000253"},{"cveID":"CVE-2016-3714","vendorProject":"ImageMagick","product":"ImageMagick","vulnerabilityName":"ImageMagick Improper Input Validation Vulnerability","dateAdded":"2024-09-09","dueDate":"2024-09-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://www.imagemagick.org/discourse-server/viewtopic.php?f=4&t=29588#p132726, https://imagemagick.org/archive/releases/; https://nvd.nist.gov/vuln/detail/CVE-2016-3714"},{"cveID":"CVE-2024-7262","vendorProject":"Kingsoft","product":"WPS Office","vulnerabilityName":"Kingsoft WPS Office Path Traversal Vulnerability","dateAdded":"2024-09-03","dueDate":"2024-09-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"While CISA cannot confirm the effectiveness of patches at this time, it is recommended that mitigations be applied per vendor instructions if available. If these instructions cannot be located or if mitigations are unavailable, discontinue the use of the product.;   https://nvd.nist.gov/vuln/detail/CVE-2024-7262"},{"cveID":"CVE-2021-20124","vendorProject":"DrayTek","product":"VigorConnect","vulnerabilityName":"Draytek VigorConnect Path Traversal Vulnerability ","dateAdded":"2024-09-03","dueDate":"2024-09-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.draytek.com/about/security-advisory/vigorconnect-software-security-vulnerability-(cve-2021-20123-cve-2021-20129); https://nvd.nist.gov/vuln/detail/CVE-2021-20124"},{"cveID":"CVE-2021-20123","vendorProject":"DrayTek","product":"VigorConnect","vulnerabilityName":"Draytek VigorConnect Path Traversal Vulnerability ","dateAdded":"2024-09-03","dueDate":"2024-09-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.draytek.com/about/security-advisory/vigorconnect-software-security-vulnerability-(cve-2021-20123-cve-2021-20129); https://nvd.nist.gov/vuln/detail/CVE-2021-20123"},{"cveID":"CVE-2024-7965","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Inappropriate Implementation Vulnerability","dateAdded":"2024-08-28","dueDate":"2024-09-18","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html; https://nvd.nist.gov/vuln/detail/CVE-2024-7965"},{"cveID":"CVE-2024-38856","vendorProject":"Apache","product":"OFBiz","vulnerabilityName":"Apache OFBiz Incorrect Authorization Vulnerability","dateAdded":"2024-08-27","dueDate":"2024-09-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/olxxjk6b13sl3wh9cmp0k2dscvp24l7w; https://nvd.nist.gov/vuln/detail/CVE-2024-38856"},{"cveID":"CVE-2024-7971","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-08-26","dueDate":"2024-09-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html; https://nvd.nist.gov/vuln/detail/CVE-2024-7971"},{"cveID":"CVE-2024-39717","vendorProject":"Versa","product":"Director","vulnerabilityName":"Versa Director Dangerous File Type Upload Vulnerability","dateAdded":"2024-08-23","dueDate":"2024-09-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://versa-networks.com/blog/versa-security-bulletin-update-on-cve-2024-39717-versa-director-dangerous-file-type-upload-vulnerability/;   https://nvd.nist.gov/vuln/detail/CVE-2024-39717"},{"cveID":"CVE-2021-31196","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Information Disclosure Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196"},{"cveID":"CVE-2022-0185","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Heap-Based Buffer Overflow Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=722d94847de2; https://nvd.nist.gov/vuln/detail/CVE-2022-0185"},{"cveID":"CVE-2021-33045","vendorProject":"Dahua","product":"IP Camera Firmware","vulnerabilityName":"Dahua IP Camera Authentication Bypass Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582; https://nvd.nist.gov/vuln/detail/CVE-2021-33045"},{"cveID":"CVE-2021-33044","vendorProject":"Dahua","product":"IP Camera Firmware","vulnerabilityName":"Dahua IP Camera Authentication Bypass Vulnerability","dateAdded":"2024-08-21","dueDate":"2024-09-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.dahuasecurity.com/aboutUs/trustedCenter/details/582; https://nvd.nist.gov/vuln/detail/CVE-2021-33044"},{"cveID":"CVE-2024-23897","vendorProject":"Jenkins","product":"Jenkins Command Line Interface (CLI)","vulnerabilityName":"Jenkins Command Line Interface (CLI) Path Traversal Vulnerability","dateAdded":"2024-08-19","dueDate":"2024-09-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.jenkins.io/security/advisory/2024-01-24/#SECURITY-3314; https://nvd.nist.gov/vuln/detail/CVE-2024-23897"},{"cveID":"CVE-2024-28986","vendorProject":"SolarWinds","product":"Web Help Desk","vulnerabilityName":"SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-08-15","dueDate":"2024-09-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28986; https://nvd.nist.gov/vuln/detail/CVE-2024-28986"},{"cveID":"CVE-2024-38107","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38107; https://nvd.nist.gov/vuln/detail/CVE-2024-38107"},{"cveID":"CVE-2024-38106","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38106; https://nvd.nist.gov/vuln/detail/CVE-2024-38106"},{"cveID":"CVE-2024-38193","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38193; https://nvd.nist.gov/vuln/detail/CVE-2024-38193"},{"cveID":"CVE-2024-38213","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38213; https://nvd.nist.gov/vuln/detail/CVE-2024-38213"},{"cveID":"CVE-2024-38178","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","dateAdded":"2024-08-13","dueDate":"2024-09-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38178; https://nvd.nist.gov/vuln/detail/CVE-2024-38178"},{"cveID":"CVE-2024-38189","vendorProject":"Microsoft","product":"Project","vulnerabilityName":"Microsoft Project Remote Code Execution Vulnerability ","dateAdded":"2024-08-13","dueDate":"2024-09-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38189; https://nvd.nist.gov/vuln/detail/CVE-2024-38189"},{"cveID":"CVE-2024-32113","vendorProject":"Apache","product":"OFBiz","vulnerabilityName":"Apache OFBiz Path Traversal Vulnerability","dateAdded":"2024-08-07","dueDate":"2024-08-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/w6s60okgkxp2th1sr8vx0ndmgk68fqrd; https://nvd.nist.gov/vuln/detail/CVE-2024-32113"},{"cveID":"CVE-2024-36971","vendorProject":"Android","product":"Kernel","vulnerabilityName":"Android Kernel Remote Code Execution Vulnerability","dateAdded":"2024-08-07","dueDate":"2024-08-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see:   https://source.android.com/docs/security/bulletin/2024-08-01,  https://lore.kernel.org/linux-cve-announce/20240610090330.1347021-2-lee@kernel.org/T/#u ; https://nvd.nist.gov/vuln/detail/CVE-2024-36971"},{"cveID":"CVE-2018-0824","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-08-05","dueDate":"2024-08-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0824; https://nvd.nist.gov/vuln/detail/CVE-2018-0824"},{"cveID":"CVE-2024-37085","vendorProject":"VMware","product":"ESXi","vulnerabilityName":"VMware ESXi Authentication Bypass Vulnerability","dateAdded":"2024-07-30","dueDate":"2024-08-20","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/24505;   https://nvd.nist.gov/vuln/detail/CVE-2024-37085"},{"cveID":"CVE-2023-45249","vendorProject":"Acronis","product":"Cyber Infrastructure (ACI)","vulnerabilityName":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","dateAdded":"2024-07-29","dueDate":"2024-08-19","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security-advisory.acronis.com/advisories/SEC-6452;  https://nvd.nist.gov/vuln/detail/CVE-2023-45249"},{"cveID":"CVE-2024-5217","vendorProject":"ServiceNow","product":"Utah, Vancouver, and Washington DC Now Platform","vulnerabilityName":"ServiceNow Incomplete List of Disallowed Inputs Vulnerability","dateAdded":"2024-07-29","dueDate":"2024-08-19","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1648313; https://nvd.nist.gov/vuln/detail/CVE-2024-5217"},{"cveID":"CVE-2024-4879","vendorProject":"ServiceNow","product":"Utah, Vancouver, and Washington DC Now Platform","vulnerabilityName":"ServiceNow Improper Input Validation Vulnerability","dateAdded":"2024-07-29","dueDate":"2024-08-19","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1645154; https://nvd.nist.gov/vuln/detail/CVE-2024-4879"},{"cveID":"CVE-2024-39891","vendorProject":"Twilio","product":"Authy","vulnerabilityName":"Twilio Authy Information Disclosure Vulnerability","dateAdded":"2024-07-23","dueDate":"2024-08-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.twilio.com/en-us/changelog/Security_Alert_Authy_App_Android_iOS; https://nvd.nist.gov/vuln/detail/CVE-2024-39891"},{"cveID":"CVE-2012-4792","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2024-07-23","dueDate":"2024-08-13","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://learn.microsoft.com/en-us/lifecycle/products/internet-explorer-11; https://nvd.nist.gov/vuln/detail/CVE-2012-4792"},{"cveID":"CVE-2022-22948","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Incorrect Default File Permissions Vulnerability ","dateAdded":"2024-07-17","dueDate":"2024-08-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.vmware.com/security/advisories/VMSA-2022-0009.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-22948"},{"cveID":"CVE-2024-28995","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Path Traversal Vulnerability ","dateAdded":"2024-07-17","dueDate":"2024-08-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995; https://nvd.nist.gov/vuln/detail/CVE-2024-28995"},{"cveID":"CVE-2024-34102","vendorProject":"Adobe","product":"Commerce and Magento Open Source","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability","dateAdded":"2024-07-17","dueDate":"2024-08-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/magento/apsb24-40.html;  https://nvd.nist.gov/vuln/detail/CVE-2024-34102"},{"cveID":"CVE-2024-36401","vendorProject":"OSGeo","product":"GeoServer","vulnerabilityName":"OSGeo GeoServer GeoTools Eval Injection Vulnerability","dateAdded":"2024-07-15","dueDate":"2024-08-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects an open-source component, third-party library, or a protocol used by different products. For more information, please see: https://github.com/geoserver/geoserver/security/advisories/GHSA-6jj6-gm7p-fcvv, https://github.com/geotools/geotools/pull/4797 ;   https://nvd.nist.gov/vuln/detail/CVE-2024-36401"},{"cveID":"CVE-2024-23692","vendorProject":"Rejetto","product":"HTTP File Server","vulnerabilityName":"Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability","dateAdded":"2024-07-09","dueDate":"2024-07-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"The patched Rejetto HTTP File Server (HFS) is version 3: https://github.com/rejetto/hfs?tab=readme-ov-file#installation, https://www.rejetto.com/hfs/ ;   https://nvd.nist.gov/vuln/detail/CVE-2024-23692"},{"cveID":"CVE-2024-38080","vendorProject":"Microsoft","product":"Windows ","vulnerabilityName":"Microsoft Windows Hyper-V Privilege Escalation Vulnerability","dateAdded":"2024-07-09","dueDate":"2024-07-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-38080; https://nvd.nist.gov/vuln/detail/CVE-2024-38080"},{"cveID":"CVE-2024-38112","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Spoofing Vulnerability","dateAdded":"2024-07-09","dueDate":"2024-07-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38112; https://nvd.nist.gov/vuln/detail/CVE-2024-38112"},{"cveID":"CVE-2024-20399","vendorProject":"Cisco","product":"NX-OS","vulnerabilityName":"Cisco NX-OS Command Injection Vulnerability","dateAdded":"2024-07-02","dueDate":"2024-07-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-cmd-injection-xD9OhyOP;   https://nvd.nist.gov/vuln/detail/CVE-2024-20399"},{"cveID":"CVE-2020-13965","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-06-26","dueDate":"2024-07-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://roundcube.net/news/2020/06/02/security-updates-1.4.5-and-1.3.12; https://nvd.nist.gov/vuln/detail/CVE-2020-13965"},{"cveID":"CVE-2022-2586","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","dateAdded":"2024-06-26","dueDate":"2024-07-17","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see: https://seclists.org/oss-sec/2022/q3/131;  https://nvd.nist.gov/vuln/detail/CVE-2022-2586"},{"cveID":"CVE-2022-24816","vendorProject":"OSGeo","product":"JAI-EXT","vulnerabilityName":"OSGeo GeoServer JAI-EXT Code Injection Vulnerability","dateAdded":"2024-06-26","dueDate":"2024-07-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. The patched JAI-EXT is version 1.1.22: https://github.com/geosolutions-it/jai-ext/releases/tag/1.1.22, https://github.com/geosolutions-it/jai-ext/security/advisories/GHSA-v92f-jx6p-73rx;  https://nvd.nist.gov/vuln/detail/CVE-2022-24816"},{"cveID":"CVE-2024-4358","vendorProject":"Progress","product":"Telerik Report Server","vulnerabilityName":"Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability","dateAdded":"2024-06-13","dueDate":"2024-07-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://docs.telerik.com/report-server/knowledge-base/registration-auth-bypass-cve-2024-4358; https://nvd.nist.gov/vuln/detail/CVE-2024-4358"},{"cveID":"CVE-2024-26169","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability","dateAdded":"2024-06-13","dueDate":"2024-07-04","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26169; https://nvd.nist.gov/vuln/detail/CVE-2024-26169"},{"cveID":"CVE-2024-32896","vendorProject":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","dateAdded":"2024-06-13","dueDate":"2024-07-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-06-01; https://nvd.nist.gov/vuln/detail/CVE-2024-32896"},{"cveID":"CVE-2024-4577","vendorProject":"PHP Group","product":"PHP","vulnerabilityName":"PHP-CGI OS Command Injection Vulnerability","dateAdded":"2024-06-12","dueDate":"2024-07-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see:  https://www.php.net/ChangeLog-8.php#;   https://nvd.nist.gov/vuln/detail/CVE-2024-4577"},{"cveID":"CVE-2024-4610","vendorProject":"Arm","product":"Mali GPU Kernel Driver","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2024-06-12","dueDate":"2024-07-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2024-4610"},{"cveID":"CVE-2017-3506","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server OS Command Injection Vulnerability","dateAdded":"2024-06-03","dueDate":"2024-06-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpuapr2017.html; https://nvd.nist.gov/vuln/detail/CVE-2017-3506"},{"cveID":"CVE-2024-1086","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","dateAdded":"2024-05-30","dueDate":"2024-06-20","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f342de4e2f33e0e39165d8639387aa6c19dff660;   https://nvd.nist.gov/vuln/detail/CVE-2024-1086"},{"cveID":"CVE-2024-24919","vendorProject":"Check Point","product":"Quantum Security Gateways","vulnerabilityName":"Check Point Quantum Security Gateways Information Disclosure Vulnerability","dateAdded":"2024-05-30","dueDate":"2024-06-20","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.checkpoint.com/results/sk/sk182336 ; https://nvd.nist.gov/vuln/detail/CVE-2024-24919"},{"cveID":"CVE-2024-4978","vendorProject":"Justice AV Solutions","product":"Viewer ","vulnerabilityName":"Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability","dateAdded":"2024-05-29","dueDate":"2024-06-19","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"Please follow the vendor’s instructions as outlined in the public statements at https://www.rapid7.com/blog/post/2024/05/23/cve-2024-4978-backdoored-justice-av-solutions-viewer-software-used-in-apparent-supply-chain-attack#remediation and https://www.javs.com/downloads;  https://nvd.nist.gov/vuln/detail/CVE-2024-4978"},{"cveID":"CVE-2024-5274","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-05-28","dueDate":"2024-06-18","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html?m=1; https://nvd.nist.gov/vuln/detail/CVE-2024-5274"},{"cveID":"CVE-2020-17519","vendorProject":"Apache","product":"Flink","vulnerabilityName":"Apache Flink Improper Access Control Vulnerability","dateAdded":"2024-05-23","dueDate":"2024-06-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://lists.apache.org/thread/typ0h03zyfrzjqlnb7plh64df1g2383d; https://nvd.nist.gov/vuln/detail/CVE-2020-17519"},{"cveID":"CVE-2024-4947","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-05-20","dueDate":"2024-06-10","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4947"},{"cveID":"CVE-2023-43208","vendorProject":"NextGen Healthcare","product":"Mirth Connect","vulnerabilityName":"NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-05-20","dueDate":"2024-06-10","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status.   For more information, please see: https://github.com/nextgenhealthcare/connect/wiki/4.4.1---What%27s-New ;  https://nvd.nist.gov/vuln/detail/CVE-2023-43208"},{"cveID":"CVE-2024-4761","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Write Vulnerability","dateAdded":"2024-05-16","dueDate":"2024-06-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html; https://nvd.nist.gov/vuln/detail/CVE-2024-4761"},{"cveID":"CVE-2021-40655","vendorProject":"D-Link","product":"DIR-605 Router","vulnerabilityName":"D-Link DIR-605 Router Information Disclosure Vulnerability","dateAdded":"2024-05-16","dueDate":"2024-06-06","requiredAction":"This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","notes":"https://legacy.us.dlink.com/pages/product.aspx?id=2b09e95d90ff4cb38830ecc04c89cee5; https://nvd.nist.gov/vuln/detail/CVE-2021-40655"},{"cveID":"CVE-2014-100005","vendorProject":"D-Link","product":"DIR-600 Router","vulnerabilityName":"D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability","dateAdded":"2024-05-16","dueDate":"2024-06-06","requiredAction":"This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","notes":"https://legacy.us.dlink.com/pages/product.aspx?id=4587b63118524aec911191cc81605283; https://nvd.nist.gov/vuln/detail/CVE-2014-100005"},{"cveID":"CVE-2024-30040","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability","dateAdded":"2024-05-14","dueDate":"2024-06-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30040; https://nvd.nist.gov/vuln/detail/CVE-2024-30040"},{"cveID":"CVE-2024-30051","vendorProject":"Microsoft","product":"DWM Core Library","vulnerabilityName":" Microsoft DWM Core Library Privilege Escalation Vulnerability","dateAdded":"2024-05-14","dueDate":"2024-06-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30051; https://nvd.nist.gov/vuln/detail/CVE-2024-30051"},{"cveID":"CVE-2024-4671","vendorProject":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Visuals Use-After-Free Vulnerability","dateAdded":"2024-05-13","dueDate":"2024-06-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_9.html?m=1; https://nvd.nist.gov/vuln/detail/CVE-2024-4671"},{"cveID":"CVE-2023-7028","vendorProject":"GitLab","product":"GitLab CE/EE","vulnerabilityName":"GitLab Community and Enterprise Editions Improper Access Control Vulnerability","dateAdded":"2024-05-01","dueDate":"2024-05-22","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/ ;  https://nvd.nist.gov/vuln/detail/CVE-2023-7028"},{"cveID":"CVE-2024-29988","vendorProject":"Microsoft","product":"SmartScreen Prompt","vulnerabilityName":"Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability","dateAdded":"2024-04-30","dueDate":"2024-05-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988; https://nvd.nist.gov/vuln/detail/CVE-2024-29988"},{"cveID":"CVE-2024-4040","vendorProject":"CrushFTP","product":"CrushFTP","vulnerabilityName":"CrushFTP VFS Sandbox Escape Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.crushftp.com/crush11wiki/Wiki.jsp?page=Update&version=34; https://nvd.nist.gov/vuln/detail/CVE-2024-4040"},{"cveID":"CVE-2024-20359","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Privilege Escalation Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-persist-rce-FLsNXF4h;  https://nvd.nist.gov/vuln/detail/CVE-2024-20359"},{"cveID":"CVE-2024-20353","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Denial of Service Vulnerability","dateAdded":"2024-04-24","dueDate":"2024-05-01","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-websrvs-dos-X8gNucD2;   https://nvd.nist.gov/vuln/detail/CVE-2024-20353"},{"cveID":"CVE-2022-38028","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability ","dateAdded":"2024-04-23","dueDate":"2024-05-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.  ","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-38028;  https://nvd.nist.gov/vuln/detail/CVE-2022-38028"},{"cveID":"CVE-2024-3400","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Command Injection Vulnerability","dateAdded":"2024-04-12","dueDate":"2024-04-19","requiredAction":"Apply mitigations per vendor instructions as they become available. Otherwise, users with vulnerable versions of affected devices should enable Threat Prevention IDs available from the vendor. See the vendor bulletin for more details and a patch release schedule.","notes":"https://security.paloaltonetworks.com/CVE-2024-3400 ;   https://nvd.nist.gov/vuln/detail/CVE-2024-3400"},{"cveID":"CVE-2024-3273","vendorProject":"D-Link","product":"Multiple NAS Devices","vulnerabilityName":"D-Link Multiple NAS Devices Command Injection Vulnerability","dateAdded":"2024-04-11","dueDate":"2024-05-02","requiredAction":"This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","notes":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://nvd.nist.gov/vuln/detail/CVE-2024-3273"},{"cveID":"CVE-2024-3272","vendorProject":"D-Link","product":"Multiple NAS Devices","vulnerabilityName":"D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability","dateAdded":"2024-04-11","dueDate":"2024-05-02","requiredAction":"This vulnerability affects legacy D-Link products. All associated hardware revisions have reached their end-of-life (EOL) or end-of-service (EOS) life cycle and should be retired and replaced per vendor instructions.","notes":"https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10383; https://nvd.nist.gov/vuln/detail/CVE-2024-3272"},{"cveID":"CVE-2024-29748","vendorProject":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Privilege Escalation Vulnerability","dateAdded":"2024-04-04","dueDate":"2024-04-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01; https://nvd.nist.gov/vuln/detail/CVE-2024-29748"},{"cveID":"CVE-2024-29745","vendorProject":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability","dateAdded":"2024-04-04","dueDate":"2024-04-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/pixel/2024-04-01 ; https://nvd.nist.gov/vuln/detail/CVE-2024-29745"},{"cveID":"CVE-2023-24955","vendorProject":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Code Injection Vulnerability","dateAdded":"2024-03-26","dueDate":"2024-04-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24955;  https://nvd.nist.gov/vuln/detail/CVE-2023-24955"},{"cveID":"CVE-2019-7256","vendorProject":"Nice","product":"Linear eMerge E3-Series","vulnerabilityName":"Nice Linear eMerge E3-Series OS Command Injection Vulnerability","dateAdded":"2024-03-25","dueDate":"2024-04-15","requiredAction":"Contact the vendor for guidance on remediating firmware, per their advisory.","notes":"https://linear-solutions.com/wp-content/uploads/E3-Bulletin-06-27-2023.pdf, https://www.cisa.gov/news-events/ics-advisories/icsa-24-065-01; https://nvd.nist.gov/vuln/detail/CVE-2019-7256"},{"cveID":"CVE-2021-44529","vendorProject":"Ivanti","product":"Endpoint Manager Cloud Service Appliance (EPM CSA)","vulnerabilityName":"Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability ","dateAdded":"2024-03-25","dueDate":"2024-04-15","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-44529"},{"cveID":"CVE-2023-48788","vendorProject":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","dateAdded":"2024-03-25","dueDate":"2024-04-15","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortiguard.com/psirt/FG-IR-24-007;  https://nvd.nist.gov/vuln/detail/CVE-2023-48788"},{"cveID":"CVE-2024-27198","vendorProject":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Authentication Bypass Vulnerability","dateAdded":"2024-03-07","dueDate":"2024-03-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.jetbrains.com/help/teamcity/teamcity-2023-11-4-release-notes.html; https://blog.jetbrains.com/teamcity/2024/03/additional-critical-security-issues-affecting-teamcity-on-premises-cve-2024-27198-and-cve-2024-27199-update-to-2023-11-4-now/ ; https://nvd.nist.gov/vuln/detail/CVE-2024-27198"},{"cveID":"CVE-2024-23225","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2024-03-06","dueDate":"2024-03-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT214081, https://support.apple.com/en-us/HT214082, https://support.apple.com/en-us/HT214083, https://support.apple.com/en-us/HT214084, https://support.apple.com/en-us/HT214085, https://support.apple.com/en-us/HT214086, https://support.apple.com/en-us/HT214087, https://support.apple.com/en-us/HT214088 ;  https://nvd.nist.gov/vuln/detail/CVE-2024-23225"},{"cveID":"CVE-2024-23296","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2024-03-06","dueDate":"2024-03-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT214081, https://support.apple.com/en-us/HT214082, https://support.apple.com/en-us/HT214084, https://support.apple.com/en-us/HT214086, https://support.apple.com/en-us/HT214088  ;  https://nvd.nist.gov/vuln/detail/CVE-2024-23296"},{"cveID":"CVE-2023-21237","vendorProject":"Android","product":"Pixel","vulnerabilityName":"Android Pixel Information Disclosure Vulnerability ","dateAdded":"2024-03-05","dueDate":"2024-03-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/pixel/2023-06-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-21237"},{"cveID":"CVE-2021-36380","vendorProject":"Sunhillo","product":"SureLine","vulnerabilityName":"Sunhillo SureLine OS Command Injection Vulnerablity","dateAdded":"2024-03-05","dueDate":"2024-03-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.sunhillo.com/fb011/; https://nvd.nist.gov/vuln/detail/CVE-2021-36380"},{"cveID":"CVE-2024-21338","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability","dateAdded":"2024-03-04","dueDate":"2024-03-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21338; https://nvd.nist.gov/vuln/detail/CVE-2024-21338"},{"cveID":"CVE-2023-29360","vendorProject":"Microsoft","product":"Streaming Service","vulnerabilityName":"Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability","dateAdded":"2024-02-29","dueDate":"2024-03-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360 ;https://nvd.nist.gov/vuln/detail/CVE-2023-29360"},{"cveID":"CVE-2024-1709","vendorProject":"ConnectWise","product":"ScreenConnect","vulnerabilityName":"ConnectWise ScreenConnect Authentication Bypass Vulnerability","dateAdded":"2024-02-22","dueDate":"2024-02-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.connectwise.com/company/trust/security-bulletins/connectwise-screenconnect-23.9.8; https://nvd.nist.gov/vuln/detail/CVE-2024-1709"},{"cveID":"CVE-2020-3259","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Information Disclosure Vulnerability","dateAdded":"2024-02-15","dueDate":"2024-03-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-info-disclose-9eJtycMB; https://nvd.nist.gov/vuln/detail/CVE-2020-3259"},{"cveID":"CVE-2024-21410","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2024-02-15","dueDate":"2024-03-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410"},{"cveID":"CVE-2024-21412","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability","dateAdded":"2024-02-13","dueDate":"2024-03-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21412; https://nvd.nist.gov/vuln/detail/CVE-2024-21412"},{"cveID":"CVE-2024-21351","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2024-02-13","dueDate":"2024-03-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-21351; https://nvd.nist.gov/vuln/detail/CVE-2024-21351"},{"cveID":"CVE-2023-43770","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2024-02-12","dueDate":"2024-03-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://roundcube.net/news/2023/09/15/security-update-1.6.3-released ;  https://nvd.nist.gov/vuln/detail/CVE-2023-43770"},{"cveID":"CVE-2024-21762","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Out-of-Bound Write Vulnerability","dateAdded":"2024-02-09","dueDate":"2024-02-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-015 ;   https://nvd.nist.gov/vuln/detail/CVE-2024-21762"},{"cveID":"CVE-2023-4762","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2024-02-06","dueDate":"2024-02-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2023-4762"},{"cveID":"CVE-2022-48618","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2024-01-31","dueDate":"2024-02-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213530, https://support.apple.com/en-us/HT213532, https://support.apple.com/en-us/HT213535, https://support.apple.com/en-us/HT213536;  https://nvd.nist.gov/vuln/detail/CVE-2022-48618"},{"cveID":"CVE-2024-21893","vendorProject":"Ivanti","product":"Connect Secure, Policy Secure, and Neurons","vulnerabilityName":"Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2024-01-31","dueDate":"2024-02-02","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-21893"},{"cveID":"CVE-2023-22527","vendorProject":"Atlassian","product":"Confluence Data Center and Server","vulnerabilityName":"Atlassian Confluence Data Center and Server Template Injection Vulnerability","dateAdded":"2024-01-24","dueDate":"2024-02-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://confluence.atlassian.com/security/cve-2023-22527-rce-remote-code-execution-vulnerability-in-confluence-data-center-and-confluence-server-1333990257.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-22527"},{"cveID":"CVE-2024-23222","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Type Confusion Vulnerability","dateAdded":"2024-01-23","dueDate":"2024-02-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT214055,  https://support.apple.com/en-us/HT214056, https://support.apple.com/en-us/HT214057, https://support.apple.com/en-us/HT214058, https://support.apple.com/en-us/HT214059, https://support.apple.com/en-us/HT214061, https://support.apple.com/en-us/HT214063 ;  https://nvd.nist.gov/vuln/detail/CVE-2024-23222"},{"cveID":"CVE-2023-34048","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Out-of-Bounds Write Vulnerability","dateAdded":"2024-01-22","dueDate":"2024-02-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.vmware.com/security/advisories/VMSA-2023-0023.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-34048"},{"cveID":"CVE-2023-35082","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM) and MobileIron Core","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","dateAdded":"2024-01-18","dueDate":"2024-02-08","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older;  https://nvd.nist.gov/vuln/detail/CVE-2023-35082"},{"cveID":"CVE-2024-0519","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Access Vulnerability","dateAdded":"2024-01-17","dueDate":"2024-02-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_16.html; https://nvd.nist.gov/vuln/detail/CVE-2024-0519"},{"cveID":"CVE-2023-6549","vendorProject":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","dateAdded":"2024-01-17","dueDate":"2024-02-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549;   https://nvd.nist.gov/vuln/detail/CVE-2023-6549"},{"cveID":"CVE-2023-6548","vendorProject":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","dateAdded":"2024-01-17","dueDate":"2024-01-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/article/CTX584986/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20236548-and-cve20236549;   https://nvd.nist.gov/vuln/detail/CVE-2023-6548"},{"cveID":"CVE-2018-15133","vendorProject":"Laravel","product":"Laravel Framework","vulnerabilityName":"Laravel Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-16","dueDate":"2024-02-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30; https://nvd.nist.gov/vuln/detail/CVE-2018-15133"},{"cveID":"CVE-2023-29357","vendorProject":"Microsoft","product":"SharePoint Server","vulnerabilityName":"Microsoft SharePoint Server Privilege Escalation Vulnerability","dateAdded":"2024-01-10","dueDate":"2024-01-31","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29357; https://nvd.nist.gov/vuln/detail/CVE-2023-29357"},{"cveID":"CVE-2023-46805","vendorProject":"Ivanti","product":"Connect Secure and Policy Secure","vulnerabilityName":"Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability","dateAdded":"2024-01-10","dueDate":"2024-01-22","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-46805"},{"cveID":"CVE-2024-21887","vendorProject":"Ivanti","product":"Connect Secure and Policy Secure","vulnerabilityName":"Ivanti Connect Secure and Policy Secure Command Injection Vulnerability","dateAdded":"2024-01-10","dueDate":"2024-01-22","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"Please apply mitigations per vendor instructions. For more information, please see: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2024-21887"},{"cveID":"CVE-2023-23752","vendorProject":"Joomla!","product":"Joomla!","vulnerabilityName":"Joomla! Improper Access Control Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://developer.joomla.org/security-centre/894-20230201-core-improper-access-check-in-webservice-endpoints.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-23752"},{"cveID":"CVE-2016-20017","vendorProject":"D-Link","product":"DSL-2750B Devices","vulnerabilityName":"D-Link DSL-2750B Devices Command Injection Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10088; https://nvd.nist.gov/vuln/detail/CVE-2016-20017"},{"cveID":"CVE-2023-41990","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213599, https://support.apple.com/en-us/HT213601, https://support.apple.com/en-us/HT213605, https://support.apple.com/en-us/HT213606, https://support.apple.com/en-us/HT213842, https://support.apple.com/en-us/HT213844, https://support.apple.com/en-us/HT213845 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-41990"},{"cveID":"CVE-2023-27524","vendorProject":"Apache","product":"Superset","vulnerabilityName":"Apache Superset Insecure Default Initialization of Resource Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://lists.apache.org/thread/n0ftx60sllf527j7g11kmt24wvof8xyk;  https://nvd.nist.gov/vuln/detail/CVE-2023-27524"},{"cveID":"CVE-2023-29300","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html; https://nvd.nist.gov/vuln/detail/CVE-2023-29300"},{"cveID":"CVE-2023-38203","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2024-01-08","dueDate":"2024-01-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-41.html ;  https://nvd.nist.gov/vuln/detail/CVE-2023-38203"},{"cveID":"CVE-2023-7101","vendorProject":"Spreadsheet::ParseExcel","product":"Spreadsheet::ParseExcel","vulnerabilityName":"Spreadsheet::ParseExcel Remote Code Execution Vulnerability","dateAdded":"2024-01-02","dueDate":"2024-01-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://metacpan.org/dist/Spreadsheet-ParseExcel and Barracuda's specific implementation and fix for their downstream issue CVE-2023-7102 at https://www.barracuda.com/company/legal/esg-vulnerability;  https://nvd.nist.gov/vuln/detail/CVE-2023-7101"},{"cveID":"CVE-2023-7024","vendorProject":"Google","product":"Chromium WebRTC","vulnerabilityName":"Google Chromium WebRTC Heap Buffer Overflow Vulnerability","dateAdded":"2024-01-02","dueDate":"2024-01-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_20.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-7024"},{"cveID":"CVE-2023-49897","vendorProject":"FXC","product":"AE1021, AE1021PE","vulnerabilityName":"FXC AE1021, AE1021PE OS Command Injection Vulnerability","dateAdded":"2023-12-21","dueDate":"2024-01-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fxc.jp/news/20231206 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-49897"},{"cveID":"CVE-2023-47565","vendorProject":"QNAP","product":"VioStor NVR","vulnerabilityName":"QNAP VioStor NVR OS Command Injection Vulnerability","dateAdded":"2023-12-21","dueDate":"2024-01-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.qnap.com/en/security-advisory/qsa-23-48 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-47565"},{"cveID":"CVE-2023-6448","vendorProject":"Unitronics","product":"Vision PLC and HMI","vulnerabilityName":"Unitronics Vision PLC and HMI Insecure Default Password Vulnerability","dateAdded":"2023-12-11","dueDate":"2023-12-18","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"Note that while it is possible to change the default password, implementors are encouraged to remove affected controllers from public networks and update the affected firmware: https://downloads.unitronicsplc.com/Sites/plc/Technical_Library/Unitronics-Cybersecurity-Advisory-2023-001-CVE-2023-6448.pdf;   https://nvd.nist.gov/vuln/detail/CVE-2023-6448"},{"cveID":"CVE-2023-41266","vendorProject":"Qlik","product":"Sense","vulnerabilityName":"Qlik Sense Path Traversal Vulnerability","dateAdded":"2023-12-07","dueDate":"2023-12-28","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801  ;  https://nvd.nist.gov/vuln/detail/CVE-2023-41266"},{"cveID":"CVE-2023-41265","vendorProject":"Qlik","product":"Sense","vulnerabilityName":"Qlik Sense HTTP Tunneling Vulnerability","dateAdded":"2023-12-07","dueDate":"2023-12-28","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2110801;  https://nvd.nist.gov/vuln/detail/CVE-2023-41265"},{"cveID":"CVE-2023-33107","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Integer Overflow Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/d66b799c804083ea5226cfffac6d6c4e7ad4968b;  https://nvd.nist.gov/vuln/detail/CVE-2023-33107"},{"cveID":"CVE-2023-33106","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-4.19/-/commit/1e46e81dbeb69aafd5842ce779f07e617680fd58;  https://nvd.nist.gov/vuln/detail/CVE-2023-33106"},{"cveID":"CVE-2023-33063","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-5.15/-/commit/2643808ddbedfaabbb334741873fb2857f78188a, https://git.codelinaro.org/clo/la/kernel/msm-4.14/-/commit/d43222efda5a01c9804d74a541e3c1be9b7fe110;  https://nvd.nist.gov/vuln/detail/CVE-2023-33063"},{"cveID":"CVE-2022-22071","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2023-12-05","dueDate":"2023-12-26","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.codelinaro.org/clo/la/kernel/msm-5.4/-/commit/586840fde350d7b8563df9889c8ce397e2c20dda;  https://nvd.nist.gov/vuln/detail/CVE-2022-22071"},{"cveID":"CVE-2023-42917","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Memory Corruption Vulnerability","dateAdded":"2023-12-04","dueDate":"2023-12-25","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT214031, https://support.apple.com/en-us/HT214032, https://support.apple.com/en-us/HT214033 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-42917"},{"cveID":"CVE-2023-42916","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","dateAdded":"2023-12-04","dueDate":"2023-12-25","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT214031, https://support.apple.com/en-us/HT214032, https://support.apple.com/en-us/HT214033 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-42916"},{"cveID":"CVE-2023-6345","vendorProject":"Google","product":"Chromium Skia","vulnerabilityName":"Google Skia Integer Overflow Vulnerability","dateAdded":"2023-11-30","dueDate":"2023-12-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html ;  https://nvd.nist.gov/vuln/detail/CVE-2023-6345"},{"cveID":"CVE-2023-49103","vendorProject":"ownCloud","product":"ownCloud graphapi","vulnerabilityName":"ownCloud graphapi Information Disclosure Vulnerability","dateAdded":"2023-11-30","dueDate":"2023-12-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://owncloud.com/security-advisories/disclosure-of-sensitive-credentials-and-configuration-in-containerized-deployments/ ;  https://nvd.nist.gov/vuln/detail/CVE-2023-49103"},{"cveID":"CVE-2023-4911","vendorProject":"GNU","product":"GNU C Library","vulnerabilityName":"GNU C Library Buffer Overflow Vulnerability","dateAdded":"2023-11-21","dueDate":"2023-12-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://sourceware.org/git/?p=glibc.git;a=commitdiff;h=1056e5b4c3f2d90ed2b4a55f96add28da2f4c8fa, https://access.redhat.com/security/cve/cve-2023-4911, https://www.debian.org/security/2023/dsa-5514 ; https://nvd.nist.gov/vuln/detail/CVE-2023-4911  "},{"cveID":"CVE-2023-36584","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","dateAdded":"2023-11-16","dueDate":"2023-12-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36584 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36584"},{"cveID":"CVE-2023-1671","vendorProject":"Sophos","product":"Web Appliance","vulnerabilityName":"Sophos Web Appliance Command Injection Vulnerability","dateAdded":"2023-11-16","dueDate":"2023-12-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.sophos.com/en-us/security-advisories/sophos-sa-20230404-swa-rce;  https://nvd.nist.gov/vuln/detail/CVE-2023-1671"},{"cveID":"CVE-2020-2551","vendorProject":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2023-11-16","dueDate":"2023-12-07","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.oracle.com/security-alerts/cpujan2020.html; https://nvd.nist.gov/vuln/detail/CVE-2020-2551"},{"cveID":"CVE-2023-36033","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","dateAdded":"2023-11-14","dueDate":"2023-12-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36033 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36033"},{"cveID":"CVE-2023-36025","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2023-11-14","dueDate":"2023-12-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36025;  https://nvd.nist.gov/vuln/detail/CVE-2023-36025"},{"cveID":"CVE-2023-36036","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability","dateAdded":"2023-11-14","dueDate":"2023-12-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36036 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36036"},{"cveID":"CVE-2023-47246","vendorProject":"SysAid","product":"SysAid Server","vulnerabilityName":"SysAid Server Path Traversal Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-12-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.sysaid.com/blog/service-desk/on-premise-software-security-vulnerability-notification; https://nvd.nist.gov/vuln/detail/CVE-2023-47246"},{"cveID":"CVE-2023-36844","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS EX Series PHP External Variable Modification Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36844"},{"cveID":"CVE-2023-36845","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36845"},{"cveID":"CVE-2023-36846","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36846"},{"cveID":"CVE-2023-36847","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US;  https://nvd.nist.gov/vuln/detail/CVE-2023-36847"},{"cveID":"CVE-2023-36851","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-11-13","dueDate":"2023-11-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://supportportal.juniper.net/s/article/2023-08-Out-of-Cycle-Security-Bulletin-Junos-OS-SRX-Series-and-EX-Series-Multiple-vulnerabilities-in-J-Web-can-be-combined-to-allow-a-preAuth-Remote-Code-Execution?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-36851"},{"cveID":"CVE-2023-29552","vendorProject":"IETF","product":"Service Location Protocol (SLP)","vulnerabilityName":"Service Location Protocol (SLP) Denial-of-Service Vulnerability","dateAdded":"2023-11-08","dueDate":"2023-11-29","requiredAction":"Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.","notes":"This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on the patching status. For more information please see https://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp and https://www.cisa.gov/news-events/alerts/2023/04/25/abuse-service-location-protocol-may-lead-dos-attacks.;  https://nvd.nist.gov/vuln/detail/CVE-2023-29552"},{"cveID":"CVE-2023-22518","vendorProject":"Atlassian","product":"Confluence Data Center and Server","vulnerabilityName":"Atlassian Confluence Data Center and Server Improper Authorization Vulnerability","dateAdded":"2023-11-07","dueDate":"2023-11-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://confluence.atlassian.com/security/cve-2023-22518-improper-authorization-vulnerability-in-confluence-data-center-and-server-1311473907.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-22518"},{"cveID":"CVE-2023-46604","vendorProject":"Apache","product":"ActiveMQ","vulnerabilityName":"Apache ActiveMQ Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-11-02","dueDate":"2023-11-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://activemq.apache.org/security-advisories.data/CVE-2023-46604-announcement.txt; https://nvd.nist.gov/vuln/detail/CVE-2023-46604"},{"cveID":"CVE-2023-46748","vendorProject":"F5","product":"BIG-IP Configuration Utility","vulnerabilityName":"F5 BIG-IP Configuration Utility SQL Injection Vulnerability","dateAdded":"2023-10-31","dueDate":"2023-11-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://my.f5.com/manage/s/article/K000137365 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-46748"},{"cveID":"CVE-2023-46747","vendorProject":"F5","product":"BIG-IP Configuration Utility","vulnerabilityName":"F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability","dateAdded":"2023-10-31","dueDate":"2023-11-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://my.f5.com/manage/s/article/K000137353;   https://nvd.nist.gov/vuln/detail/CVE-2023-46747"},{"cveID":"CVE-2023-5631","vendorProject":"Roundcube","product":"Webmail","vulnerabilityName":"Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-10-26","dueDate":"2023-11-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://roundcube.net/news/2023/10/16/security-update-1.6.4-released, https://roundcube.net/news/2023/10/16/security-updates-1.5.5-and-1.4.15 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-5631"},{"cveID":"CVE-2023-20273","vendorProject":"Cisco","product":"Cisco IOS XE Web UI","vulnerabilityName":"Cisco IOS XE Web UI Command Injection Vulnerability","dateAdded":"2023-10-23","dueDate":"2023-10-27","requiredAction":"Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webui-privesc-j22SaA4z;  https://nvd.nist.gov/vuln/detail/CVE-2023-20273"},{"cveID":"CVE-2023-4966","vendorProject":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability","dateAdded":"2023-10-18","dueDate":"2023-11-08","requiredAction":"Apply mitigations and kill all active and persistent sessions per vendor instructions [https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/] OR discontinue use of the product if mitigations are unavailable.","notes":"https://www.netscaler.com/blog/news/cve-2023-4966-critical-security-update-now-available-for-netscaler-adc-and-netscaler-gateway/, https://support.citrix.com/article/CTX579459/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20234966-and-cve20234967 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-4966"},{"cveID":"CVE-2023-20198","vendorProject":"Cisco","product":"IOS XE Web UI","vulnerabilityName":"Cisco IOS XE Web UI Privilege Escalation Vulnerability","dateAdded":"2023-10-16","dueDate":"2023-10-20","requiredAction":"Verify that instances of Cisco IOS XE Web UI are in compliance with BOD 23-02 and apply mitigations per vendor instructions. For affected products (Cisco IOS XE Web UI exposed to the internet or to untrusted networks), follow vendor instructions to determine if a system may have been compromised and immediately report positive findings to CISA.","notes":"https://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-xe-dublin-17121/221128-software-fix-availability-for-cisco-ios.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-20198"},{"cveID":"CVE-2023-21608","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb23-01.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-21608"},{"cveID":"CVE-2023-20109","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-getvpn-rce-g8qR68sx;  https://nvd.nist.gov/vuln/detail/CVE-2023-20109"},{"cveID":"CVE-2023-41763","vendorProject":"Microsoft","product":"Skype for Business","vulnerabilityName":"Microsoft Skype for Business Privilege Escalation Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-41763;   https://nvd.nist.gov/vuln/detail/CVE-2023-41763"},{"cveID":"CVE-2023-36563","vendorProject":"Microsoft","product":"WordPad","vulnerabilityName":"Microsoft WordPad Information Disclosure Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36563;  https://nvd.nist.gov/vuln/detail/CVE-2023-36563"},{"cveID":"CVE-2023-44487","vendorProject":"IETF","product":"HTTP/2","vulnerabilityName":"HTTP/2 Rapid Reset Attack Vulnerability","dateAdded":"2023-10-10","dueDate":"2023-10-31","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"This vulnerability affects a common open-source component, third-party library, or protocol used by different products. For more information, please see: HTTP/2 Rapid Reset Vulnerability, CVE-2023-44487 | CISA: https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487; https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/;  https://nvd.nist.gov/vuln/detail/CVE-2023-44487"},{"cveID":"CVE-2023-22515","vendorProject":"Atlassian","product":"Confluence Data Center and Server","vulnerabilityName":"Atlassian Confluence Data Center and Server Broken Access Control Vulnerability","dateAdded":"2023-10-05","dueDate":"2023-10-13","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Check all affected Confluence instances for evidence of compromise per vendor instructions and report any positive findings to CISA.","notes":"https://confluence.atlassian.com/security/cve-2023-22515-privilege-escalation-vulnerability-in-confluence-data-center-and-server-1295682276.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-22515"},{"cveID":"CVE-2023-40044","vendorProject":"Progress","product":"WS_FTP Server","vulnerabilityName":"Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-10-05","dueDate":"2023-10-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://community.progress.com/s/article/WS-FTP-Server-Critical-Vulnerability-September-2023; https://nvd.nist.gov/vuln/detail/CVE-2023-40044"},{"cveID":"CVE-2023-42824","vendorProject":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability","dateAdded":"2023-10-05","dueDate":"2023-10-26","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213961;  https://nvd.nist.gov/vuln/detail/CVE-2023-42824"},{"cveID":"CVE-2023-42793","vendorProject":"JetBrains","product":"TeamCity","vulnerabilityName":"JetBrains TeamCity Authentication Bypass Vulnerability","dateAdded":"2023-10-04","dueDate":"2023-10-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://blog.jetbrains.com/teamcity/2023/09/critical-security-issue-affecting-teamcity-on-premises-update-to-2023-05-4-now/ ;  https://nvd.nist.gov/vuln/detail/CVE-2023-42793"},{"cveID":"CVE-2023-28229","vendorProject":"Microsoft","product":"Windows CNG Key Isolation Service","vulnerabilityName":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","dateAdded":"2023-10-04","dueDate":"2023-10-25","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28229; https://nvd.nist.gov/vuln/detail/CVE-2023-28229"},{"cveID":"CVE-2023-4211","vendorProject":"Arm","product":"Mali GPU Kernel Driver","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-10-03","dueDate":"2023-10-24","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2023-4211"},{"cveID":"CVE-2023-5217","vendorProject":"Google","product":"Chromium libvpx","vulnerabilityName":"Google Chromium libvpx Heap Buffer Overflow Vulnerability","dateAdded":"2023-10-02","dueDate":"2023-10-23","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html; https://nvd.nist.gov/vuln/detail/CVE-2023-5217"},{"cveID":"CVE-2018-14667","vendorProject":"Red Hat","product":"JBoss RichFaces Framework","vulnerabilityName":"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","dateAdded":"2023-09-28","dueDate":"2023-10-19","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14667; https://nvd.nist.gov/vuln/detail/CVE-2018-14667"},{"cveID":"CVE-2023-41991","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Improper Certificate Validation Vulnerability","dateAdded":"2023-09-25","dueDate":"2023-10-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213926, https://support.apple.com/en-us/HT213927, https://support.apple.com/en-us/HT213928, https://support.apple.com/en-us/HT213929, https://support.apple.com/en-us/HT213931 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-41991"},{"cveID":"CVE-2023-41992","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Kernel Privilege Escalation Vulnerability","dateAdded":"2023-09-25","dueDate":"2023-10-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213926, https://support.apple.com/en-us/HT213927, https://support.apple.com/en-us/HT213928, https://support.apple.com/en-us/HT213929, https://support.apple.com/en-us/HT213931, https://support.apple.com/en-us/HT213932;  https://nvd.nist.gov/vuln/detail/CVE-2023-41992"},{"cveID":"CVE-2023-41993","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Code Execution Vulnerability","dateAdded":"2023-09-25","dueDate":"2023-10-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213926, https://support.apple.com/en-us/HT213927, https://support.apple.com/en-us/HT213930;  https://nvd.nist.gov/vuln/detail/CVE-2023-41993"},{"cveID":"CVE-2023-41179","vendorProject":"Trend Micro","product":"Apex One and Worry-Free Business Security","vulnerabilityName":"Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability","dateAdded":"2023-09-21","dueDate":"2023-10-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://success.trendmicro.com/dcx/s/solution/000294994?language=en_US ; https://nvd.nist.gov/vuln/detail/CVE-2023-41179"},{"cveID":"CVE-2023-28434","vendorProject":"MinIO","product":"MinIO","vulnerabilityName":"MinIO Security Feature Bypass Vulnerability","dateAdded":"2023-09-19","dueDate":"2023-10-10","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/minio/minio/security/advisories/GHSA-2pxw-r47w-4p8c;  https://nvd.nist.gov/vuln/detail/CVE-2023-28434"},{"cveID":"CVE-2022-22265","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Use-After-Free Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2022&month=1;  https://nvd.nist.gov/vuln/detail/CVE-2022-22265"},{"cveID":"CVE-2014-8361","vendorProject":"Realtek","product":"SDK","vulnerabilityName":"Realtek SDK Improper Input Validation Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://web.archive.org/web/20150831100501/http://securityadvisories.dlink.com/security/publication.aspx?name=SAP10055; https://nvd.nist.gov/vuln/detail/CVE-2014-8361"},{"cveID":"CVE-2017-6884","vendorProject":"Zyxel","product":"EMG2926 Routers","vulnerabilityName":"Zyxel EMG2926 Routers Command Injection Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-emg2926-q10a-ethernet-cpe, https://www.zyxelguard.com/Zyxel-EOL.asp; https://nvd.nist.gov/vuln/detail/CVE-2017-6884"},{"cveID":"CVE-2021-3129","vendorProject":"Laravel","product":"Ignition","vulnerabilityName":"Laravel Ignition File Upload Vulnerability","dateAdded":"2023-09-18","dueDate":"2023-10-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://github.com/facade/ignition/releases/tag/2.5.2; https://nvd.nist.gov/vuln/detail/CVE-2021-3129"},{"cveID":"CVE-2023-26369","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability","dateAdded":"2023-09-14","dueDate":"2023-10-05","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/acrobat/apsb23-34.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26369"},{"cveID":"CVE-2023-35674","vendorProject":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://source.android.com/docs/security/bulletin/2023-09-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-35674"},{"cveID":"CVE-2023-20269","vendorProject":"Cisco","product":"Adaptive Security Appliance and Firepower Threat Defense","vulnerabilityName":"Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","requiredAction":"Apply mitigations per vendor instructions for group-lock and vpn-simultaneous-logins or discontinue use of the product for unsupported devices.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asaftd-ravpn-auth-8LyfCkeC;  https://nvd.nist.gov/vuln/detail/CVE-2023-20269"},{"cveID":"CVE-2023-4863","vendorProject":"Google","product":"Chromium WebP","vulnerabilityName":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","dateAdded":"2023-09-13","dueDate":"2023-10-04","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1; https://nvd.nist.gov/vuln/detail/CVE-2023-4863"},{"cveID":"CVE-2023-36761","vendorProject":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Information Disclosure Vulnerability","dateAdded":"2023-09-12","dueDate":"2023-10-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36761;  https://nvd.nist.gov/vuln/detail/CVE-2023-36761"},{"cveID":"CVE-2023-36802","vendorProject":"Microsoft","product":"Streaming Service Proxy","vulnerabilityName":"Microsoft Streaming Service Proxy Privilege Escalation Vulnerability","dateAdded":"2023-09-12","dueDate":"2023-10-03","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802;   https://nvd.nist.gov/vuln/detail/CVE-2023-36802"},{"cveID":"CVE-2023-41064","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability","dateAdded":"2023-09-11","dueDate":"2023-10-02","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213905, https://support.apple.com/en-us/HT213906; https://nvd.nist.gov/vuln/detail/CVE-2023-41064"},{"cveID":"CVE-2023-41061","vendorProject":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability","dateAdded":"2023-09-11","dueDate":"2023-10-02","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213905, https://support.apple.com/kb/HT213907; https://nvd.nist.gov/vuln/detail/CVE-2023-41061"},{"cveID":"CVE-2023-33246","vendorProject":"Apache","product":"RocketMQ","vulnerabilityName":"Apache RocketMQ Command Execution Vulnerability","dateAdded":"2023-09-06","dueDate":"2023-09-27","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://lists.apache.org/thread/1s8j2c8kogthtpv3060yddk03zq0pxyp;  https://nvd.nist.gov/vuln/detail/CVE-2023-33246"},{"cveID":"CVE-2023-38831","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"RARLAB WinRAR Code Execution Vulnerability","dateAdded":"2023-08-24","dueDate":"2023-09-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"http://www.win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa;  https://nvd.nist.gov/vuln/detail/CVE-2023-38831"},{"cveID":"CVE-2023-32315","vendorProject":"Ignite Realtime","product":"Openfire","vulnerabilityName":"Ignite Realtime Openfire Path Traversal Vulnerability","dateAdded":"2023-08-24","dueDate":"2023-09-14","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.igniterealtime.org/downloads/#openfire;  https://nvd.nist.gov/vuln/detail/CVE-2023-32315"},{"cveID":"CVE-2023-38035","vendorProject":"Ivanti","product":"Sentry","vulnerabilityName":"Ivanti Sentry Authentication Bypass Vulnerability","dateAdded":"2023-08-22","dueDate":"2023-09-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/CVE-2023-38035-API-Authentication-Bypass-on-Sentry-Administrator-Interface?language=en_US ;  https://nvd.nist.gov/vuln/detail/CVE-2023-38035"},{"cveID":"CVE-2023-27532","vendorProject":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability","dateAdded":"2023-08-22","dueDate":"2023-09-12","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.veeam.com/kb4424;  https://nvd.nist.gov/vuln/detail/CVE-2023-27532"},{"cveID":"CVE-2023-26359","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-08-21","dueDate":"2023-09-11","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26359"},{"cveID":"CVE-2023-24489","vendorProject":"Citrix","product":"Content Collaboration","vulnerabilityName":"Citrix Content Collaboration ShareFile Improper Access Control Vulnerability","dateAdded":"2023-08-16","dueDate":"2023-09-06","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/article/CTX559517/sharefile-storagezones-controller-security-update-for-cve202324489;  https://nvd.nist.gov/vuln/detail/CVE-2023-24489"},{"cveID":"CVE-2023-38180","vendorProject":"Microsoft","product":".NET Core and Visual Studio","vulnerabilityName":"Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability","dateAdded":"2023-08-09","dueDate":"2023-08-30","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-38180;  https://nvd.nist.gov/vuln/detail/CVE-2023-38180"},{"cveID":"CVE-2017-18368","vendorProject":"Zyxel","product":"P660HN-T1A Routers","vulnerabilityName":"Zyxel P660HN-T1A Routers Command Injection Vulnerability","dateAdded":"2023-08-07","dueDate":"2023-08-28","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-a-new-variant-of-gafgyt-malware; https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-command-injection-vulnerability-in-p660hn-t1a-dsl-cpe; https://nvd.nist.gov/vuln/detail/CVE-2017-18368"},{"cveID":"CVE-2023-35081","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability","dateAdded":"2023-07-31","dueDate":"2023-08-21","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/CVE-2023-35081-Arbitrary-File-Write?language=en_US;  https://nvd.nist.gov/vuln/detail/CVE-2023-35081"},{"cveID":"CVE-2023-37580","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-07-27","dueDate":"2023-08-17","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://wiki.zimbra.com/wiki/Security_Center ;  https://nvd.nist.gov/vuln/detail/CVE-2023-37580"},{"cveID":"CVE-2023-38606","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Kernel Unspecified Vulnerability","dateAdded":"2023-07-26","dueDate":"2023-08-16","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.apple.com/en-us/HT213841, https://support.apple.com/en-us/HT213842, https://support.apple.com/en-us/HT213843,https://support.apple.com/en-us/HT213844,https://support.apple.com/en-us/HT213845,https://support.apple.com/en-us/HT213846,https://support.apple.com/en-us/HT213848 ;  https://nvd.nist.gov/vuln/detail/CVE-2023-38606"},{"cveID":"CVE-2023-35078","vendorProject":"Ivanti","product":"Endpoint Manager Mobile (EPMM)","vulnerabilityName":"Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability","dateAdded":"2023-07-25","dueDate":"2023-08-15","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability?language=en_US;  https://nvd.nist.gov/vuln/detail/CVE-2023-35078"},{"cveID":"CVE-2023-29298","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2023-07-20","dueDate":"2023-08-10","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-40.html; https://nvd.nist.gov/vuln/detail/CVE-2023-29298"},{"cveID":"CVE-2023-38205","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Improper Access Control Vulnerability","dateAdded":"2023-07-20","dueDate":"2023-08-10","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-47.html ;  https://nvd.nist.gov/vuln/detail/CVE-2023-38205"},{"cveID":"CVE-2023-3519","vendorProject":"Citrix","product":"NetScaler ADC and NetScaler Gateway","vulnerabilityName":"Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability","dateAdded":"2023-07-19","dueDate":"2023-08-09","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://support.citrix.com/article/CTX561482/citrix-adc-and-citrix-gateway-security-bulletin-for-cve20233519-cve20233466-cve20233467;  https://nvd.nist.gov/vuln/detail/CVE-2023-3519"},{"cveID":"CVE-2023-36884","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Search Remote Code Execution Vulnerability","dateAdded":"2023-07-17","dueDate":"2023-08-29","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884;  https://nvd.nist.gov/vuln/detail/CVE-2023-36884"},{"cveID":"CVE-2022-29303","vendorProject":"SolarView","product":"Compact","vulnerabilityName":"SolarView Compact Command Injection Vulnerability","dateAdded":"2023-07-13","dueDate":"2023-08-03","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://jvn.jp/en/vu/JVNVU92327282/;  https://nvd.nist.gov/vuln/detail/CVE-2022-29303"},{"cveID":"CVE-2023-37450","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Code Execution Vulnerability","dateAdded":"2023-07-13","dueDate":"2023-08-03","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://support.apple.com/en-us/HT213826, https://support.apple.com/en-us/HT213841, https://support.apple.com/en-us/HT213843, https://support.apple.com/en-us/HT213846, https://support.apple.com/en-us/HT213848;  https://nvd.nist.gov/vuln/detail/CVE-2023-37450"},{"cveID":"CVE-2023-32046","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32046;  https://nvd.nist.gov/vuln/detail/CVE-2023-32046"},{"cveID":"CVE-2023-32049","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-32049; https://nvd.nist.gov/vuln/detail/CVE-2023-32049"},{"cveID":"CVE-2023-35311","vendorProject":"Microsoft","product":"Outlook","vulnerabilityName":"Microsoft Outlook Security Feature Bypass Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-35311;  https://nvd.nist.gov/vuln/detail/CVE-2023-35311"},{"cveID":"CVE-2023-36874","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-36874;  https://nvd.nist.gov/vuln/detail/CVE-2023-36874"},{"cveID":"CVE-2022-31199","vendorProject":"Netwrix","product":"Auditor","vulnerabilityName":"Netwrix Auditor Insecure Object Deserialization Vulnerability","dateAdded":"2023-07-11","dueDate":"2023-08-01","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"Patch application requires login to customer portal: https://security.netwrix.com/Account/SignIn?ReturnUrl=%2FAdvisories%2FADV-2022-003;  https://nvd.nist.gov/vuln/detail/CVE-2022-31199"},{"cveID":"CVE-2021-29256","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-07-07","dueDate":"2023-07-28","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities; https://nvd.nist.gov/vuln/detail/CVE-2021-29256"},{"cveID":"CVE-2019-17621","vendorProject":"D-Link","product":"DIR-859 Router","vulnerabilityName":"D-Link DIR-859 Router Command Execution Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10147; https://nvd.nist.gov/vuln/detail/CVE-2019-17621"},{"cveID":"CVE-2019-20500","vendorProject":"D-Link","product":"DWL-2600AP Access Point","vulnerabilityName":"D-Link DWL-2600AP Access Point Command Injection Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10113; https://nvd.nist.gov/vuln/detail/CVE-2019-20500"},{"cveID":"CVE-2021-25487","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Out-of-Bounds Read Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25487"},{"cveID":"CVE-2021-25489","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Input Validation Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=10; https://nvd.nist.gov/vuln/detail/CVE-2021-25489"},{"cveID":"CVE-2021-25394","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Race Condition Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5; https://nvd.nist.gov/vuln/detail/CVE-2021-25394"},{"cveID":"CVE-2021-25395","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Race Condition Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=5; https://nvd.nist.gov/vuln/detail/CVE-2021-25395"},{"cveID":"CVE-2021-25371","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Unspecified Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3; https://nvd.nist.gov/vuln/detail/CVE-2021-25371"},{"cveID":"CVE-2021-25372","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Boundary Check Vulnerability","dateAdded":"2023-06-29","dueDate":"2023-07-20","requiredAction":"Apply updates per vendor instructions or discontinue use of the product if updates are unavailable","notes":"https://security.samsungmobile.com/securityUpdate.smsb?year=2021&month=3; https://nvd.nist.gov/vuln/detail/CVE-2021-25372"},{"cveID":"CVE-2023-32434","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Integer Overflow Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213808, https://support.apple.com/en-us/HT213812, https://support.apple.com/en-us/HT213809, https://support.apple.com/en-us/HT213810, https://support.apple.com/en-us/HT213813, https://support.apple.com/en-us/HT213811, https://support.apple.com/en-us/HT213814;  https://nvd.nist.gov/vuln/detail/CVE-2023-32434"},{"cveID":"CVE-2023-32435","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Memory Corruption Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213670, https://support.apple.com/en-us/HT213671, https://support.apple.com/en-us/HT213676, https://support.apple.com/en-us/HT213811;  https://nvd.nist.gov/vuln/detail/CVE-2023-32435"},{"cveID":"CVE-2023-32439","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Type Confusion Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213813, https://support.apple.com/en-us/HT213811, https://support.apple.com/en-us/HT213814, https://support.apple.com/en-us/HT213816;  https://nvd.nist.gov/vuln/detail/CVE-2023-32439"},{"cveID":"CVE-2023-20867","vendorProject":"VMware","product":"Tools","vulnerabilityName":"VMware Tools Authentication Bypass Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.vmware.com/security/advisories/VMSA-2023-0013.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-20867"},{"cveID":"CVE-2023-27992","vendorProject":"Zyxel","product":"Multiple Network-Attached Storage (NAS) Devices","vulnerabilityName":"Zyxel Multiple NAS Devices Command Injection Vulnerability","dateAdded":"2023-06-23","dueDate":"2023-07-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-pre-authentication-command-injection-vulnerability-in-nas-products;  https://nvd.nist.gov/vuln/detail/CVE-2023-27992"},{"cveID":"CVE-2023-20887","vendorProject":"VMware","product":"Aria Operations for Networks","vulnerabilityName":"Vmware Aria Operations for Networks Command Injection Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.vmware.com/security/advisories/VMSA-2023-0012.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-20887"},{"cveID":"CVE-2020-35730","vendorProject":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://roundcube.net/news/2020/12/27/security-updates-1.4.10-1.3.16-and-1.2.13; https://nvd.nist.gov/vuln/detail/CVE-2020-35730"},{"cveID":"CVE-2020-12641","vendorProject":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail Remote Code Execution Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://roundcube.net/news/2020/04/29/security-updates-1.4.4-1.3.11-and-1.2.10; https://nvd.nist.gov/vuln/detail/CVE-2020-12641"},{"cveID":"CVE-2021-44026","vendorProject":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail SQL Injection Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://roundcube.net/news/2021/11/12/security-updates-1.4.12-and-1.3.17-released; https://nvd.nist.gov/vuln/detail/CVE-2021-44026"},{"cveID":"CVE-2016-9079","vendorProject":"Mozilla","product":"Firefox, Firefox ESR, and Thunderbird","vulnerabilityName":"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.mozilla.org/en-US/security/advisories/mfsa2016-92/#CVE-2016-9079; https://nvd.nist.gov/vuln/detail/CVE-2016-9079"},{"cveID":"CVE-2016-0165","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2023-06-22","dueDate":"2023-07-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-039; https://nvd.nist.gov/vuln/detail/CVE-2016-0165"},{"cveID":"CVE-2023-27997","vendorProject":"Fortinet","product":"FortiOS and FortiProxy SSL-VPN","vulnerabilityName":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","dateAdded":"2023-06-13","dueDate":"2023-07-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-23-097;  https://nvd.nist.gov/vuln/detail/CVE-2023-27997"},{"cveID":"CVE-2023-3079","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2023-06-07","dueDate":"2023-06-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop.html; https://nvd.nist.gov/vuln/detail/CVE-2023-3079"},{"cveID":"CVE-2023-33009","vendorProject":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","dateAdded":"2023-06-05","dueDate":"2023-06-26","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls;  https://nvd.nist.gov/vuln/detail/CVE-2023-33009"},{"cveID":"CVE-2023-33010","vendorProject":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls Buffer Overflow Vulnerability","dateAdded":"2023-06-05","dueDate":"2023-06-26","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-buffer-overflow-vulnerabilities-of-firewalls;  https://nvd.nist.gov/vuln/detail/CVE-2023-33010"},{"cveID":"CVE-2023-34362","vendorProject":"Progress","product":"MOVEit Transfer","vulnerabilityName":"Progress MOVEit Transfer SQL Injection Vulnerability","dateAdded":"2023-06-02","dueDate":"2023-06-23","requiredAction":"Apply updates per vendor instructions.","notes":"This CVE has a CISA AA located here: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a. Please see the AA for associated IOCs. Additional information is available at: https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-31May2023.;  https://nvd.nist.gov/vuln/detail/CVE-2023-34362"},{"cveID":"CVE-2023-28771","vendorProject":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","dateAdded":"2023-05-31","dueDate":"2023-06-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-remote-command-injection-vulnerability-of-firewalls;   https://nvd.nist.gov/vuln/detail/CVE-2023-28771"},{"cveID":"CVE-2023-2868","vendorProject":"Barracuda Networks","product":"Email Security Gateway (ESG) Appliance","vulnerabilityName":"Barracuda Networks ESG Appliance Improper Input Validation Vulnerability","dateAdded":"2023-05-26","dueDate":"2023-06-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://status.barracuda.com/incidents/34kx82j5n4q9;  https://nvd.nist.gov/vuln/detail/CVE-2023-2868"},{"cveID":"CVE-2023-32409","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Sandbox Escape Vulnerability","dateAdded":"2023-05-22","dueDate":"2023-06-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765; https://nvd.nist.gov/vuln/detail/CVE-2023-32409"},{"cveID":"CVE-2023-28204","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability","dateAdded":"2023-05-22","dueDate":"2023-06-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765;  https://nvd.nist.gov/vuln/detail/CVE-2023-28204"},{"cveID":"CVE-2023-32373","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Use-After-Free Vulnerability","dateAdded":"2023-05-22","dueDate":"2023-06-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/HT213757, https://support.apple.com/HT213758, https://support.apple.com/HT213761, https://support.apple.com/HT213762, https://support.apple.com/HT213764, https://support.apple.com/HT213765; https://nvd.nist.gov/vuln/detail/CVE-2023-32373"},{"cveID":"CVE-2004-1464","vendorProject":"Cisco","product":"IOS","vulnerabilityName":"Cisco IOS Denial-of-Service Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20040827-telnet; https://nvd.nist.gov/vuln/detail/CVE-2004-1464"},{"cveID":"CVE-2016-6415","vendorProject":"Cisco","product":"IOS, IOS XR, and IOS XE","vulnerabilityName":"Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1; https://nvd.nist.gov/vuln/detail/CVE-2016-6415"},{"cveID":"CVE-2023-21492","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability","dateAdded":"2023-05-19","dueDate":"2023-06-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://security.samsungmobile.com/securityUpdate.smsb;  https://nvd.nist.gov/vuln/detail/CVE-2023-21492"},{"cveID":"CVE-2023-25717","vendorProject":"Ruckus Wireless","product":"Multiple Products","vulnerabilityName":"Multiple Ruckus Wireless Products CSRF and RCE Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions or disconnect product if it is end-of-life.","notes":"https://support.ruckuswireless.com/security_bulletins/315;  https://nvd.nist.gov/vuln/detail/CVE-2023-25717"},{"cveID":"CVE-2021-3560","vendorProject":"Red Hat","product":"Polkit","vulnerabilityName":"Red Hat Polkit Incorrect Authorization Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://bugzilla.redhat.com/show_bug.cgi?id=1961710; https://nvd.nist.gov/vuln/detail/CVE-2021-3560"},{"cveID":"CVE-2014-0196","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://lkml.iu.edu/hypermail/linux/kernel/1609.1/02103.html; https://nvd.nist.gov/vuln/detail/CVE-2014-0196"},{"cveID":"CVE-2010-3904","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Input Validation Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904"},{"cveID":"CVE-2015-5317","vendorProject":"Jenkins","product":"Jenkins User Interface (UI)","vulnerabilityName":"Jenkins User Interface (UI) Information Disclosure Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.jenkins.io/security/advisory/2015-11-11/; https://nvd.nist.gov/vuln/detail/CVE-2015-5317"},{"cveID":"CVE-2016-3427","vendorProject":"Oracle","product":"Java SE and JRockit","vulnerabilityName":"Oracle Java SE and JRockit Unspecified Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.oracle.com/security-alerts/cpuapr2016v3.html; https://nvd.nist.gov/vuln/detail/CVE-2016-3427"},{"cveID":"CVE-2016-8735","vendorProject":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Remote Code Execution Vulnerability","dateAdded":"2023-05-12","dueDate":"2023-06-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://tomcat.apache.org/security-9.html; https://nvd.nist.gov/vuln/detail/CVE-2016-8735"},{"cveID":"CVE-2023-29336","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32K Privilege Escalation Vulnerability","dateAdded":"2023-05-09","dueDate":"2023-05-30","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29336; https://nvd.nist.gov/vuln/detail/CVE-2023-29336"},{"cveID":"CVE-2023-1389","vendorProject":"TP-Link","product":"Archer AX21","vulnerabilityName":"TP-Link Archer AX-21 Command Injection Vulnerability","dateAdded":"2023-05-01","dueDate":"2023-05-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.tp-link.com/us/support/download/archer-ax21/v3/#Firmware;  https://nvd.nist.gov/vuln/detail/CVE-2023-1389"},{"cveID":"CVE-2021-45046","vendorProject":"Apache","product":"Log4j2","vulnerabilityName":"Apache Log4j2 Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-05-01","dueDate":"2023-05-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://logging.apache.org/log4j/2.x/security.html; https://nvd.nist.gov/vuln/detail/CVE-2021-45046"},{"cveID":"CVE-2023-21839","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2023-05-01","dueDate":"2023-05-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.oracle.com/security-alerts/cpujan2023.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-21839"},{"cveID":"CVE-2023-28432","vendorProject":"MinIO","product":"MinIO","vulnerabilityName":"MinIO Information Disclosure Vulnerability","dateAdded":"2023-04-21","dueDate":"2023-05-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://github.com/minio/minio/security/advisories/GHSA-6xvq-wj2x-3h3q; https://nvd.nist.gov/vuln/detail/CVE-2023-28432"},{"cveID":"CVE-2023-27350","vendorProject":"PaperCut","product":"MF/NG","vulnerabilityName":"PaperCut MF/NG Improper Access Control Vulnerability","dateAdded":"2023-04-21","dueDate":"2023-05-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.papercut.com/kb/Main/PO-1216-and-PO-1219;  https://nvd.nist.gov/vuln/detail/CVE-2023-27350"},{"cveID":"CVE-2023-2136","vendorProject":"Google","product":"Chromium Skia","vulnerabilityName":"Google Chrome Skia Integer Overflow Vulnerability","dateAdded":"2023-04-21","dueDate":"2023-05-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_18.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-2136"},{"cveID":"CVE-2017-6742","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2023-04-19","dueDate":"2023-05-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; https://nvd.nist.gov/vuln/detail/CVE-2017-6742"},{"cveID":"CVE-2019-8526","vendorProject":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Use-After-Free Vulnerability","dateAdded":"2023-04-17","dueDate":"2023-05-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT209600; https://nvd.nist.gov/vuln/detail/CVE-2019-8526"},{"cveID":"CVE-2023-2033","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2023-04-17","dueDate":"2023-05-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2023/04/stable-channel-update-for-desktop_14.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-2033"},{"cveID":"CVE-2023-20963","vendorProject":"Android","product":"Framework","vulnerabilityName":"Android Framework Privilege Escalation Vulnerability","dateAdded":"2023-04-13","dueDate":"2023-05-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://source.android.com/docs/security/bulletin/2023-03-01;  https://nvd.nist.gov/vuln/detail/CVE-2023-20963"},{"cveID":"CVE-2023-29492","vendorProject":"Novi Survey","product":"Novi Survey","vulnerabilityName":"Novi Survey Insecure Deserialization Vulnerability","dateAdded":"2023-04-13","dueDate":"2023-05-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://novisurvey.net/blog/novi-survey-security-advisory-apr-2023.aspx; https://nvd.nist.gov/vuln/detail/CVE-2023-29492"},{"cveID":"CVE-2023-28252","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2023-04-11","dueDate":"2023-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-28252;  https://nvd.nist.gov/vuln/detail/CVE-2023-28252"},{"cveID":"CVE-2023-28205","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Use-After-Free Vulnerability","dateAdded":"2023-04-10","dueDate":"2023-05-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213720,https://support.apple.com/en-us/HT213721,https://support.apple.com/en-us/HT213722,https://support.apple.com/en-us/HT213723;  https://nvd.nist.gov/vuln/detail/CVE-2023-28205"},{"cveID":"CVE-2023-28206","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability","dateAdded":"2023-04-10","dueDate":"2023-05-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213720, https://support.apple.com/en-us/HT213721; https://nvd.nist.gov/vuln/detail/CVE-2023-28206"},{"cveID":"CVE-2021-27876","vendorProject":"Veritas","product":"Backup Exec Agent","vulnerabilityName":"Veritas Backup Exec Agent File Access Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.veritas.com/support/en_US/security/VTS21-001; https://nvd.nist.gov/vuln/detail/CVE-2021-27876"},{"cveID":"CVE-2021-27877","vendorProject":"Veritas","product":"Backup Exec Agent","vulnerabilityName":"Veritas Backup Exec Agent Improper Authentication Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.veritas.com/support/en_US/security/VTS21-001; https://nvd.nist.gov/vuln/detail/CVE-2021-27877"},{"cveID":"CVE-2021-27878","vendorProject":"Veritas","product":"Backup Exec Agent","vulnerabilityName":"Veritas Backup Exec Agent Command Execution Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.veritas.com/support/en_US/security/VTS21-001; https://nvd.nist.gov/vuln/detail/CVE-2021-27878"},{"cveID":"CVE-2019-1388","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1388; https://nvd.nist.gov/vuln/detail/CVE-2019-1388"},{"cveID":"CVE-2023-26083","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Information Disclosure Vulnerability","dateAdded":"2023-04-07","dueDate":"2023-04-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2023-26083"},{"cveID":"CVE-2022-27926","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-04-03","dueDate":"2023-04-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://wiki.zimbra.com/wiki/Security_Center;  https://nvd.nist.gov/vuln/detail/CVE-2022-27926"},{"cveID":"CVE-2013-3163","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://learn.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-055; https://nvd.nist.gov/vuln/detail/CVE-2013-3163"},{"cveID":"CVE-2017-7494","vendorProject":"Samba","product":"Samba","vulnerabilityName":"Samba Remote Code Execution Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.samba.org/samba/security/CVE-2017-7494.html; https://nvd.nist.gov/vuln/detail/CVE-2017-7494"},{"cveID":"CVE-2022-42948","vendorProject":"Fortra","product":"Cobalt Strike","vulnerabilityName":"Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-2/;  https://nvd.nist.gov/vuln/detail/CVE-2022-42948"},{"cveID":"CVE-2022-39197","vendorProject":"Fortra","product":"Cobalt Strike","vulnerabilityName":"Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.cobaltstrike.com/blog/out-of-band-update-cobalt-strike-4-7-1/;  https://nvd.nist.gov/vuln/detail/CVE-2022-39197"},{"cveID":"CVE-2021-30900","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT21286, https://support.apple.com/en-us/HT212868, https://support.apple.com/kb/HT212872; https://nvd.nist.gov/vuln/detail/CVE-2021-30900"},{"cveID":"CVE-2022-38181","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2022-38181"},{"cveID":"CVE-2023-0266","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.10/alsa-pcm-move-rwsem-lock-inside-snd_ctl_elem_read-to-prevent-uaf.patch?id=72783cf35e6c55bca84c4bb7b776c58152856fd4;  https://nvd.nist.gov/vuln/detail/CVE-2023-0266"},{"cveID":"CVE-2022-3038","vendorProject":"Google","product":"Chromium Network Service","vulnerabilityName":"Google Chromium Network Service Use-After-Free Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-3038"},{"cveID":"CVE-2022-22706","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali GPU Kernel Driver Unspecified Vulnerability","dateAdded":"2023-03-30","dueDate":"2023-04-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities;  https://nvd.nist.gov/vuln/detail/CVE-2022-22706"},{"cveID":"CVE-2023-26360","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2023-03-15","dueDate":"2023-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://helpx.adobe.com/security/products/coldfusion/apsb23-25.html;  https://nvd.nist.gov/vuln/detail/CVE-2023-26360"},{"cveID":"CVE-2023-23397","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Outlook Privilege Escalation Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23397, https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/, ;  https://nvd.nist.gov/vuln/detail/CVE-2023-23397"},{"cveID":"CVE-2023-24880","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-24880;  https://nvd.nist.gov/vuln/detail/CVE-2023-24880"},{"cveID":"CVE-2022-41328","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Path Traversal Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-22-369;  https://nvd.nist.gov/vuln/detail/CVE-2022-41328"},{"cveID":"CVE-2021-39144","vendorProject":"XStream","product":"XStream","vulnerabilityName":"XStream Remote Code Execution Vulnerability","dateAdded":"2023-03-10","dueDate":"2023-03-31","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.vmware.com/security/advisories/VMSA-2022-0027.html, https://x-stream.github.io/CVE-2021-39144.html; https://nvd.nist.gov/vuln/detail/CVE-2021-39144"},{"cveID":"CVE-2020-5741","vendorProject":"Plex","product":"Media Server","vulnerabilityName":"Plex Media Server Remote Code Execution Vulnerability","dateAdded":"2023-03-10","dueDate":"2023-03-31","requiredAction":"Apply updates per vendor instructions.","notes":"https://forums.plex.tv/t/security-regarding-cve-2020-5741/586819; https://nvd.nist.gov/vuln/detail/CVE-2020-5741"},{"cveID":"CVE-2022-28810","vendorProject":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability","dateAdded":"2023-03-07","dueDate":"2023-03-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.manageengine.com/products/self-service-password/advisory/CVE-2022-28810.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-28810"},{"cveID":"CVE-2022-33891","vendorProject":"Apache","product":"Spark","vulnerabilityName":"Apache Spark Command Injection Vulnerability","dateAdded":"2023-03-07","dueDate":"2023-03-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://lists.apache.org/thread/p847l3kopoo5bjtmxrcwk21xp6tjxqlc;  https://nvd.nist.gov/vuln/detail/CVE-2022-33891"},{"cveID":"CVE-2022-35914","vendorProject":"Teclib","product":"GLPI","vulnerabilityName":"Teclib GLPI Remote Code Execution Vulnerability","dateAdded":"2023-03-07","dueDate":"2023-03-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://glpi-project.org/fr/glpi-10-0-3-disponible/, http://www.bioinformatics.org/phplabware/sourceer/sourceer.php?&Sfs=htmLawedTest.php&Sl=.%2Finternal_utilities%2FhtmLawed.;  https://nvd.nist.gov/vuln/detail/CVE-2022-35914"},{"cveID":"CVE-2022-36537","vendorProject":"ZK Framework","product":"AuUploader","vulnerabilityName":"ZK Framework AuUploader Unspecified Vulnerability","dateAdded":"2023-02-27","dueDate":"2023-03-20","requiredAction":"Apply updates per vendor instructions.","notes":"https://tracker.zkoss.org/browse/ZK-5150;  https://nvd.nist.gov/vuln/detail/CVE-2022-36537"},{"cveID":"CVE-2022-47986","vendorProject":"IBM","product":"Aspera Faspex","vulnerabilityName":"IBM Aspera Faspex Code Execution Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://exchange.xforce.ibmcloud.com/vulnerabilities/243512?_ga=2.189195179.1800390251.1676559338-700333034.1676325890;  https://nvd.nist.gov/vuln/detail/CVE-2022-47986"},{"cveID":"CVE-2022-41223","vendorProject":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Code Injection Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0008;  https://nvd.nist.gov/vuln/detail/CVE-2022-41223"},{"cveID":"CVE-2022-40765","vendorProject":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Command Injection Vulnerability","dateAdded":"2023-02-21","dueDate":"2023-03-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-22-0007;  https://nvd.nist.gov/vuln/detail/CVE-2022-40765"},{"cveID":"CVE-2022-46169","vendorProject":"Cacti","product":"Cacti","vulnerabilityName":"Cacti Command Injection Vulnerability","dateAdded":"2023-02-16","dueDate":"2023-03-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf;  https://nvd.nist.gov/vuln/detail/CVE-2022-46169"},{"cveID":"CVE-2023-21715","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Publisher Security Feature Bypass Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21715;  https://nvd.nist.gov/vuln/detail/CVE-2023-21715"},{"cveID":"CVE-2023-23376","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-23376;  https://nvd.nist.gov/vuln/detail/CVE-2023-23376"},{"cveID":"CVE-2023-23529","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Type Confusion Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213635, https://support.apple.com/en-us/HT213633, https://support.apple.com/en-us/HT213638;  https://nvd.nist.gov/vuln/detail/CVE-2023-23529"},{"cveID":"CVE-2023-21823","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Graphic Component Privilege Escalation Vulnerability","dateAdded":"2023-02-14","dueDate":"2023-03-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21823;  https://nvd.nist.gov/vuln/detail/CVE-2023-21823"},{"cveID":"CVE-2015-2291","vendorProject":"Intel","product":"Ethernet Diagnostics Driver for Windows","vulnerabilityName":"Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability","dateAdded":"2023-02-10","dueDate":"2023-03-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00051.html; https://nvd.nist.gov/vuln/detail/CVE-2015-2291"},{"cveID":"CVE-2022-24990","vendorProject":"TerraMaster","product":"TerraMaster OS","vulnerabilityName":"TerraMaster OS Remote Command Execution Vulnerability","dateAdded":"2023-02-10","dueDate":"2023-03-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://forum.terra-master.com/en/viewtopic.php?t=3030;  https://nvd.nist.gov/vuln/detail/CVE-2022-24990"},{"cveID":"CVE-2023-0669","vendorProject":"Fortra","product":"GoAnywhere MFT","vulnerabilityName":"Fortra GoAnywhere MFT Remote Code Execution Vulnerability","dateAdded":"2023-02-10","dueDate":"2023-03-03","requiredAction":"Apply updates per vendor instructions.","notes":"This CVE has a CISA AA located here: https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-158a. Please see the AA for associated IOCs. Additional information is available at: https://my.goanywhere.com/webclient/DownloadProductFiles.xhtml. Fortra users must have an account in order to login and access the patch.;  https://nvd.nist.gov/vuln/detail/CVE-2023-0669"},{"cveID":"CVE-2022-21587","vendorProject":"Oracle","product":"E-Business Suite","vulnerabilityName":"Oracle E-Business Suite Unspecified Vulnerability","dateAdded":"2023-02-02","dueDate":"2023-02-23","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.oracle.com/security-alerts/cpuoct2022.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-21587"},{"cveID":"CVE-2023-22952","vendorProject":"SugarCRM","product":"Multiple Products","vulnerabilityName":"Multiple SugarCRM Products Remote Code Execution Vulnerability","dateAdded":"2023-02-02","dueDate":"2023-02-23","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2023-001/;  https://nvd.nist.gov/vuln/detail/CVE-2023-22952"},{"cveID":"CVE-2017-11357","vendorProject":"Telerik","product":"User Interface (UI) for ASP.NET AJAX","vulnerabilityName":"Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability","dateAdded":"2023-01-26","dueDate":"2023-02-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://docs.telerik.com/devtools/aspnet-ajax/knowledge-base/asyncupload-insecure-direct-object-reference; https://nvd.nist.gov/vuln/detail/CVE-2017-11357"},{"cveID":"CVE-2022-47966","vendorProject":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","dateAdded":"2023-01-23","dueDate":"2023-02-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.manageengine.com/security/advisory/CVE/cve-2022-47966.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-47966"},{"cveID":"CVE-2022-44877","vendorProject":"CWP","product":"Control Web Panel","vulnerabilityName":"CWP Control Web Panel OS Command Injection Vulnerability","dateAdded":"2023-01-17","dueDate":"2023-02-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://control-webpanel.com/changelog#1669855527714-450fb335-6194;  https://nvd.nist.gov/vuln/detail/CVE-2022-44877"},{"cveID":"CVE-2022-41080","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2023-01-10","dueDate":"2023-01-31","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080;  https://nvd.nist.gov/vuln/detail/CVE-2022-41080"},{"cveID":"CVE-2023-21674","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability","dateAdded":"2023-01-10","dueDate":"2023-01-31","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-21674;  https://nvd.nist.gov/vuln/detail/CVE-2023-21674"},{"cveID":"CVE-2018-5430","vendorProject":"TIBCO","product":"JasperReports","vulnerabilityName":"TIBCO JasperReports Server Information Disclosure Vulnerability","dateAdded":"2022-12-29","dueDate":"2023-01-19","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.tibco.com/support/advisories/2018/04/tibco-security-advisory-april-17-2018-tibco-jasperreports-2018-5430;https://nvd.nist.gov/vuln/detail/CVE-2018-5430"},{"cveID":"CVE-2018-18809","vendorProject":"TIBCO","product":"JasperReports","vulnerabilityName":"TIBCO JasperReports Library Directory Traversal Vulnerability","dateAdded":"2022-12-29","dueDate":"2023-01-19","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.tibco.com/support/advisories/2019/03/tibco-security-advisory-march-6-2019-tibco-jasperreports-library-2018-18809; https://nvd.nist.gov/vuln/detail/CVE-2018-18809"},{"cveID":"CVE-2022-42856","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Type Confusion Vulnerability","dateAdded":"2022-12-14","dueDate":"2023-01-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213516;  https://nvd.nist.gov/vuln/detail/CVE-2022-42856"},{"cveID":"CVE-2022-42475","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-22-398;  https://nvd.nist.gov/vuln/detail/CVE-2022-42475"},{"cveID":"CVE-2022-44698","vendorProject":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender SmartScreen Security Feature Bypass Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-44698;  https://nvd.nist.gov/vuln/detail/CVE-2022-44698"},{"cveID":"CVE-2022-27518","vendorProject":"Citrix","product":"Application Delivery Controller (ADC) and Gateway","vulnerabilityName":"Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.citrix.com/blogs/2022/12/13/critical-security-update-now-available-for-citrix-adc-citrix-gateway/;  https://nvd.nist.gov/vuln/detail/CVE-2022-27518"},{"cveID":"CVE-2022-26500","vendorProject":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup & Replication Remote Code Execution Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.veeam.com/kb4288;  https://nvd.nist.gov/vuln/detail/CVE-2022-26500"},{"cveID":"CVE-2022-26501","vendorProject":"Veeam","product":"Backup & Replication","vulnerabilityName":"Veeam Backup & Replication Remote Code Execution Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.veeam.com/kb4288;  https://nvd.nist.gov/vuln/detail/CVE-2022-26501"},{"cveID":"CVE-2022-4262","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-12-05","dueDate":"2022-12-26","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2022/12/stable-channel-update-for-desktop.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-4262"},{"cveID":"CVE-2021-35587","vendorProject":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2022-11-28","dueDate":"2022-12-19","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.oracle.com/security-alerts/cpujan2022.html; https://nvd.nist.gov/vuln/detail/CVE-2021-35587"},{"cveID":"CVE-2022-4135","vendorProject":"Google","product":"Chromium GPU","vulnerabilityName":"Google Chromium GPU Heap Buffer Overflow Vulnerability","dateAdded":"2022-11-28","dueDate":"2022-12-19","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-4135"},{"cveID":"CVE-2022-41049","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","dateAdded":"2022-11-14","dueDate":"2022-12-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41049;  https://nvd.nist.gov/vuln/detail/CVE-2022-41049"},{"cveID":"CVE-2022-41091","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41091;  https://nvd.nist.gov/vuln/detail/CVE-2022-41091"},{"cveID":"CVE-2022-41073","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41073;  https://nvd.nist.gov/vuln/detail/CVE-2022-41073"},{"cveID":"CVE-2022-41125","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-41125;  https://nvd.nist.gov/vuln/detail/CVE-2022-41125"},{"cveID":"CVE-2022-41128","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Languages Remote Code Execution Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-12-09","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41128;  https://nvd.nist.gov/vuln/detail/CVE-2022-41128"},{"cveID":"CVE-2021-25337","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Access Control Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-11-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25337"},{"cveID":"CVE-2021-25369","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Improper Access Control Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-11-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25369"},{"cveID":"CVE-2021-25370","vendorProject":"Samsung","product":"Mobile Devices","vulnerabilityName":"Samsung Mobile Devices Memory Corruption Vulnerability","dateAdded":"2022-11-08","dueDate":"2022-11-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://security.samsungmobile.com/securityUpdate.smsb; https://nvd.nist.gov/vuln/detail/CVE-2021-25370"},{"cveID":"CVE-2022-3723","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-10-28","dueDate":"2022-11-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_27.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-3723"},{"cveID":"CVE-2022-42827","vendorProject":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-10-25","dueDate":"2022-11-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213489;  https://nvd.nist.gov/vuln/detail/CVE-2022-42827"},{"cveID":"CVE-2020-3433","vendorProject":"Cisco","product":"AnyConnect Secure","vulnerabilityName":"Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-F26WwJW; https://nvd.nist.gov/vuln/detail/CVE-2020-3433"},{"cveID":"CVE-2020-3153","vendorProject":"Cisco","product":"AnyConnect Secure","vulnerabilityName":"Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ac-win-path-traverse-qO4HWBsj; https://nvd.nist.gov/vuln/detail/CVE-2020-3153"},{"cveID":"CVE-2018-19323","vendorProject":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19323"},{"cveID":"CVE-2018-19322","vendorProject":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Code Execution Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19322"},{"cveID":"CVE-2018-19321","vendorProject":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Privilege Escalation Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19321"},{"cveID":"CVE-2018-19320","vendorProject":"GIGABYTE","product":"Multiple Products","vulnerabilityName":"GIGABYTE Multiple Products Unspecified Vulnerability","dateAdded":"2022-10-24","dueDate":"2022-11-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.gigabyte.com/Support/Security/1801; https://nvd.nist.gov/vuln/detail/CVE-2018-19320"},{"cveID":"CVE-2022-41352","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","dateAdded":"2022-10-20","dueDate":"2022-11-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://wiki.zimbra.com/wiki/Security_Center;  https://nvd.nist.gov/vuln/detail/CVE-2022-41352"},{"cveID":"CVE-2021-3493","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-10-20","dueDate":"2022-11-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52; https://nvd.nist.gov/vuln/detail/CVE-2021-3493"},{"cveID":"CVE-2022-40684","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Vulnerability","dateAdded":"2022-10-11","dueDate":"2022-11-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-22-377;  https://nvd.nist.gov/vuln/detail/CVE-2022-40684"},{"cveID":"CVE-2022-41033","vendorProject":"Microsoft","product":"Windows COM+ Event System Service","vulnerabilityName":"Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability","dateAdded":"2022-10-11","dueDate":"2022-11-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41033;  https://nvd.nist.gov/vuln/detail/CVE-2022-41033"},{"cveID":"CVE-2022-41082","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2022-09-30","dueDate":"2022-10-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41082"},{"cveID":"CVE-2022-41040","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","dateAdded":"2022-09-30","dueDate":"2022-10-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41040"},{"cveID":"CVE-2022-36804","vendorProject":"Atlassian","product":"Bitbucket Server and Data Center","vulnerabilityName":"Atlassian Bitbucket Server and Data Center Command Injection Vulnerability","dateAdded":"2022-09-30","dueDate":"2022-10-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://jira.atlassian.com/browse/BSERV-13438;  https://nvd.nist.gov/vuln/detail/CVE-2022-36804"},{"cveID":"CVE-2022-3236","vendorProject":"Sophos","product":"Firewall","vulnerabilityName":"Sophos Firewall Code Injection Vulnerability","dateAdded":"2022-09-23","dueDate":"2022-10-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.sophos.com/en-us/security-advisories/sophos-sa-20220923-sfos-rce;  https://nvd.nist.gov/vuln/detail/CVE-2022-3236"},{"cveID":"CVE-2022-35405","vendorProject":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability","dateAdded":"2022-09-22","dueDate":"2022-10-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.manageengine.com/products/passwordmanagerpro/advisory/cve-2022-35405.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-35405"},{"cveID":"CVE-2022-40139","vendorProject":"Trend Micro","product":"Apex One and Apex One as a Service","vulnerabilityName":"Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://success.trendmicro.com/dcx/s/solution/000291528?language=en_US;  https://nvd.nist.gov/vuln/detail/CVE-2022-40139"},{"cveID":"CVE-2013-6282","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Input Validation Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8404663f81d212918ff85f493649a7991209fa04; https://nvd.nist.gov/vuln/detail/CVE-2013-6282"},{"cveID":"CVE-2013-2597","vendorProject":"Code Aurora","product":"ACDB Audio Driver","vulnerabilityName":"Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://web.archive.org/web/20161226013354/https:/www.codeaurora.org/news/security-advisories/stack-based-buffer-overflow-acdb-audio-driver-cve-2013-2597; https://nvd.nist.gov/vuln/detail/CVE-2013-2597"},{"cveID":"CVE-2013-2596","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Integer Overflow Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fc9bbca8f650e5f738af8806317c0a041a48ae4a; https://nvd.nist.gov/vuln/detail/CVE-2013-2596"},{"cveID":"CVE-2013-2094","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8176cced706b5e5d15887584150764894e94e02f; https://nvd.nist.gov/vuln/detail/CVE-2013-2094"},{"cveID":"CVE-2010-2568","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2022-09-15","dueDate":"2022-10-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046; https://nvd.nist.gov/vuln/detail/CVE-2010-2568"},{"cveID":"CVE-2022-37969","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2022-09-14","dueDate":"2022-10-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-37969;  https://nvd.nist.gov/vuln/detail/CVE-2022-37969"},{"cveID":"CVE-2022-32917","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability","dateAdded":"2022-09-14","dueDate":"2022-10-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT213445, https://support.apple.com/en-us/HT213444;  https://nvd.nist.gov/vuln/detail/CVE-2022-32917"},{"cveID":"CVE-2022-3075","vendorProject":"Google","product":"Chromium Mojo","vulnerabilityName":"Google Chromium Mojo Insufficient Data Validation Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2022/09/stable-channel-update-for-desktop.html, https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-3075;  https://nvd.nist.gov/vuln/detail/CVE-2022-3075"},{"cveID":"CVE-2022-27593","vendorProject":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Externally Controlled Reference Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.qnap.com/en/security-advisory/qsa-22-24;  https://nvd.nist.gov/vuln/detail/CVE-2022-27593"},{"cveID":"CVE-2022-26258","vendorProject":"D-Link","product":"DIR-820L","vulnerabilityName":"D-Link DIR-820L Remote Code Execution Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10295;  https://nvd.nist.gov/vuln/detail/CVE-2022-26258"},{"cveID":"CVE-2020-9934","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Input Validation Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT211288, https://support.apple.com/en-us/HT211289; https://nvd.nist.gov/vuln/detail/CVE-2020-9934"},{"cveID":"CVE-2018-7445","vendorProject":"MikroTik","product":"RouterOS","vulnerabilityName":"MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445"},{"cveID":"CVE-2018-6530","vendorProject":"D-Link","product":"Multiple Routers","vulnerabilityName":"D-Link Multiple Routers OS Command Injection Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"The vendor D-Link published an advisory stating the fix under CVE-2018-20114 properly patches KEV entry CVE-2018-6530. If the device is still supported, apply updates per vendor instructions. If the affected device has since entered its end-of-life, it should be disconnected if still in use.","notes":"https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10105; https://nvd.nist.gov/vuln/detail/CVE-2018-6530"},{"cveID":"CVE-2018-2628","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.oracle.com/security-alerts/cpuapr2018.html; https://nvd.nist.gov/vuln/detail/CVE-2018-2628"},{"cveID":"CVE-2018-13374","vendorProject":"Fortinet","product":"FortiOS and FortiADC","vulnerabilityName":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-18-157; https://nvd.nist.gov/vuln/detail/CVE-2018-13374"},{"cveID":"CVE-2017-5521","vendorProject":"NETGEAR","product":"Multiple Devices","vulnerabilityName":"NETGEAR Multiple Devices Exposure of Sensitive Information Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions. If the affected device has since entered end-of-life, it should be disconnected if still in use.","notes":"https://kb.netgear.com/30632/Web-GUI-Password-Recovery-and-Exposure-Security-Vulnerability; https://nvd.nist.gov/vuln/detail/CVE-2017-5521"},{"cveID":"CVE-2011-4723","vendorProject":"D-Link","product":"DIR-300 Router","vulnerabilityName":"D-Link DIR-300 Router Cleartext Storage of a Password Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://www.dlink.com/uk/en/support/product/dir-300-wireless-g-router; https://nvd.nist.gov/vuln/detail/CVE-2011-4723"},{"cveID":"CVE-2011-1823","vendorProject":"Android","product":"Android OS","vulnerabilityName":"Android OS Privilege Escalation Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e; https://nvd.nist.gov/vuln/detail/CVE-2011-1823"},{"cveID":"CVE-2022-26352","vendorProject":"dotCMS","product":"dotCMS","vulnerabilityName":"dotCMS Unrestricted Upload of File Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.dotcms.com/security/SI-62;  https://nvd.nist.gov/vuln/detail/CVE-2022-26352"},{"cveID":"CVE-2022-24706","vendorProject":"Apache","product":"CouchDB","vulnerabilityName":"Apache CouchDB Insecure Default Initialization of Resource Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00;  https://nvd.nist.gov/vuln/detail/CVE-2022-24706"},{"cveID":"CVE-2022-24112","vendorProject":"Apache","product":"APISIX","vulnerabilityName":"Apache APISIX Authentication Bypass Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://lists.apache.org/thread/lcdqywz8zy94mdysk7p3gfdgn51jmt94;  https://nvd.nist.gov/vuln/detail/CVE-2022-24112"},{"cveID":"CVE-2022-22963","vendorProject":"VMware Tanzu","product":"Spring Cloud","vulnerabilityName":"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://tanzu.vmware.com/security/cve-2022-22963;  https://nvd.nist.gov/vuln/detail/CVE-2022-22963"},{"cveID":"CVE-2022-2294","vendorProject":"WebRTC","product":"WebRTC","vulnerabilityName":"WebRTC Heap Buffer Overflow Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://groups.google.com/g/discuss-webrtc/c/5KBtZx2gvcQ;  https://nvd.nist.gov/vuln/detail/CVE-2022-2294"},{"cveID":"CVE-2021-39226","vendorProject":"Grafana Labs","product":"Grafana","vulnerabilityName":"Grafana Authentication Bypass Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/; https://nvd.nist.gov/vuln/detail/CVE-2021-39226"},{"cveID":"CVE-2021-38406","vendorProject":"Delta Electronics","product":"DOPSoft 2","vulnerabilityName":"Delta Electronics DOPSoft 2 Improper Input Validation Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://www.cisa.gov/uscert/ics/advisories/icsa-21-252-02; https://nvd.nist.gov/vuln/detail/CVE-2021-38406"},{"cveID":"CVE-2021-31010","vendorProject":"Apple","product":"iOS, macOS, watchOS","vulnerabilityName":"Apple iOS, macOS, watchOS Sandbox Bypass Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-us/HT212804, https://support.apple.com/en-us/HT212805, https://support.apple.com/en-us/HT212806, https://support.apple.com/en-us/HT212807, https://support.apple.com/en-us/HT212824; https://nvd.nist.gov/vuln/detail/CVE-2021-31010"},{"cveID":"CVE-2020-36193","vendorProject":"PEAR","product":"Archive_Tar","vulnerabilityName":"PEAR Archive_Tar Improper Link Resolution Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b389de916, https://www.drupal.org/sa-core-2021-001, https://access.redhat.com/security/cve/cve-2020-36193; https://nvd.nist.gov/vuln/detail/CVE-2020-36193"},{"cveID":"CVE-2020-28949","vendorProject":"PEAR","product":"Archive_Tar","vulnerabilityName":"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-08-25","dueDate":"2022-09-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://pear.php.net/bugs/bug.php?id=27002, https://www.drupal.org/sa-core-2020-013, https://access.redhat.com/security/cve/cve-2020-28949; https://nvd.nist.gov/vuln/detail/CVE-2020-28949"},{"cveID":"CVE-2022-0028","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Reflected Amplification Denial-of-Service Vulnerability","dateAdded":"2022-08-22","dueDate":"2022-09-12","requiredAction":"Apply updates per vendor instructions.","notes":"https://security.paloaltonetworks.com/CVE-2022-0028; https://nvd.nist.gov/vuln/detail/CVE-2022-0028"},{"cveID":"CVE-2022-22536","vendorProject":"SAP","product":"Multiple Products","vulnerabilityName":"SAP Multiple Products HTTP Request Smuggling Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"SAP users must have an account in order to login and access the patch. https://accounts.sap.com/saml2/idp/sso;  https://nvd.nist.gov/vuln/detail/CVE-2022-22536"},{"cveID":"CVE-2022-32894","vendorProject":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-gb/HT213412, https://support.apple.com/en-gb/HT213413;  https://nvd.nist.gov/vuln/detail/CVE-2022-32894"},{"cveID":"CVE-2022-32893","vendorProject":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple iOS and macOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://support.apple.com/en-gb/HT213412, https://support.apple.com/en-gb/HT213413;  https://nvd.nist.gov/vuln/detail/CVE-2022-32893"},{"cveID":"CVE-2022-2856","vendorProject":"Google","product":"Chromium Intents","vulnerabilityName":"Google Chromium Intents Insufficient Input Validation Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_16.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-2856"},{"cveID":"CVE-2022-26923","vendorProject":"Microsoft","product":"Active Directory","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-26923;  https://nvd.nist.gov/vuln/detail/CVE-2022-26923"},{"cveID":"CVE-2022-21971","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Runtime Remote Code Execution Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-21971;  https://nvd.nist.gov/vuln/detail/CVE-2022-21971"},{"cveID":"CVE-2017-15944","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","dateAdded":"2022-08-18","dueDate":"2022-09-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://security.paloaltonetworks.com/CVE-2017-15944; https://nvd.nist.gov/vuln/detail/CVE-2017-15944"},{"cveID":"CVE-2022-27925","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability","dateAdded":"2022-08-11","dueDate":"2022-09-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/;  https://nvd.nist.gov/vuln/detail/CVE-2022-27925"},{"cveID":"CVE-2022-37042","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Authentication Bypass Vulnerability","dateAdded":"2022-08-11","dueDate":"2022-09-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://blog.zimbra.com/2022/08/authentication-bypass-in-mailboximportservlet-vulnerability/;  https://nvd.nist.gov/vuln/detail/CVE-2022-37042"},{"cveID":"CVE-2022-34713","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","dateAdded":"2022-08-09","dueDate":"2022-08-30","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34713;  https://nvd.nist.gov/vuln/detail/CVE-2022-34713"},{"cveID":"CVE-2022-30333","vendorProject":"RARLAB","product":"UnRAR","vulnerabilityName":"RARLAB UnRAR Directory Traversal Vulnerability","dateAdded":"2022-08-09","dueDate":"2022-08-30","requiredAction":"Apply updates per vendor instructions.","notes":"Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz;  https://nvd.nist.gov/vuln/detail/CVE-2022-30333"},{"cveID":"CVE-2022-27924","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability","dateAdded":"2022-08-04","dueDate":"2022-08-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P24.1#Security_Fixes;  https://nvd.nist.gov/vuln/detail/CVE-2022-27924"},{"cveID":"CVE-2022-26138","vendorProject":"Atlassian","product":"Confluence","vulnerabilityName":"Atlassian Questions For Confluence App Hard-coded Credentials Vulnerability","dateAdded":"2022-07-29","dueDate":"2022-08-19","requiredAction":"Apply updates per vendor instructions.","notes":"https://confluence.atlassian.com/doc/questions-for-confluence-security-advisory-2022-07-20-1142446709.html;  https://nvd.nist.gov/vuln/detail/CVE-2022-26138"},{"cveID":"CVE-2022-22047","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability","dateAdded":"2022-07-12","dueDate":"2022-08-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-22047;  https://nvd.nist.gov/vuln/detail/CVE-2022-22047"},{"cveID":"CVE-2022-26925","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows LSA Spoofing Vulnerability","dateAdded":"2022-07-01","dueDate":"2022-07-22","requiredAction":"Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].","notes":"WARNING: This update is required on all Microsoft Windows endpoints but if deployed to domain controllers without additional configuration changes the update breaks PIV/CAC authentication. Read CISA implementation guidance carefully before deploying to domain controllers.;  https://nvd.nist.gov/vuln/detail/CVE-2022-26925"},{"cveID":"CVE-2022-29499","vendorProject":"Mitel","product":"MiVoice Connect","vulnerabilityName":"Mitel MiVoice Connect Data Validation Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-29499"},{"cveID":"CVE-2021-30533","vendorProject":"Google","product":"Chromium PopupBlocker","vulnerabilityName":"Google Chromium PopupBlocker Security Bypass Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30533"},{"cveID":"CVE-2021-4034","vendorProject":"Red Hat","product":"Polkit","vulnerabilityName":"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-4034"},{"cveID":"CVE-2021-30983","vendorProject":"Apple","product":"iOS and iPadOS","vulnerabilityName":"Apple iOS and iPadOS Buffer Overflow Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30983"},{"cveID":"CVE-2020-3837","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3837"},{"cveID":"CVE-2020-9907","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-9907"},{"cveID":"CVE-2019-8605","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Use-After-Free Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8605"},{"cveID":"CVE-2018-4344","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-06-27","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4344"},{"cveID":"CVE-2022-30190","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability","dateAdded":"2022-06-14","dueDate":"2022-07-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-30190"},{"cveID":"CVE-2021-38163","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Unrestricted File Upload Vulnerability","dateAdded":"2022-06-09","dueDate":"2022-06-30","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38163"},{"cveID":"CVE-2016-2386","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver SQL Injection Vulnerability","dateAdded":"2022-06-09","dueDate":"2022-06-30","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-2386"},{"cveID":"CVE-2016-2388","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Information Disclosure Vulnerability","dateAdded":"2022-06-09","dueDate":"2022-06-30","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-2388"},{"cveID":"CVE-2019-7195","vendorProject":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Path Traversal Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7195"},{"cveID":"CVE-2019-7194","vendorProject":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Path Traversal Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7194"},{"cveID":"CVE-2019-7193","vendorProject":"QNAP","product":"QTS","vulnerabilityName":"QNAP QTS Improper Input Validation Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7193"},{"cveID":"CVE-2019-7192","vendorProject":"QNAP","product":"Photo Station","vulnerabilityName":"QNAP Photo Station Improper Access Control Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7192"},{"cveID":"CVE-2019-5825","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5825"},{"cveID":"CVE-2019-15271","vendorProject":"Cisco","product":"RV Series Routers","vulnerabilityName":"Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-15271"},{"cveID":"CVE-2018-6065","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Integer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-6065"},{"cveID":"CVE-2018-4990","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Double Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4990"},{"cveID":"CVE-2018-17480","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-17480"},{"cveID":"CVE-2018-17463","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-17463"},{"cveID":"CVE-2017-6862","vendorProject":"NETGEAR","product":"Multiple Devices","vulnerabilityName":"NETGEAR Multiple Devices Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6862"},{"cveID":"CVE-2017-5070","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5070"},{"cveID":"CVE-2017-5030","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5030"},{"cveID":"CVE-2016-5198","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Memory Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-5198"},{"cveID":"CVE-2016-1646","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Read Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1646"},{"cveID":"CVE-2013-1331","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1331"},{"cveID":"CVE-2012-5054","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5054"},{"cveID":"CVE-2012-4969","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-4969"},{"cveID":"CVE-2012-1889","vendorProject":"Microsoft","product":"XML Core Services","vulnerabilityName":"Microsoft XML Core Services Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1889"},{"cveID":"CVE-2012-0767","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0767"},{"cveID":"CVE-2012-0754","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0754"},{"cveID":"CVE-2012-0151","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Authenticode Signature Verification Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0151"},{"cveID":"CVE-2011-2462","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-2462"},{"cveID":"CVE-2011-0609","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0609"},{"cveID":"CVE-2010-2883","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-2883"},{"cveID":"CVE-2010-2572","vendorProject":"Microsoft","product":"PowerPoint","vulnerabilityName":"Microsoft PowerPoint Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-2572"},{"cveID":"CVE-2010-1297","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1297"},{"cveID":"CVE-2009-4324","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-4324"},{"cveID":"CVE-2009-3953","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Universal 3D Remote Code Execution Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3953"},{"cveID":"CVE-2009-1862","vendorProject":"Adobe","product":"Acrobat and Reader, Flash Player","vulnerabilityName":"Adobe Acrobat and Reader, Flash Player Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"For Adobe Acrobat and Reader, apply updates per vendor instructions. For Adobe Flash Player, the impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-1862"},{"cveID":"CVE-2009-0563","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-0563"},{"cveID":"CVE-2009-0557","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Object Record Corruption Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-0557"},{"cveID":"CVE-2008-0655","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Unspecified Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-0655"},{"cveID":"CVE-2007-5659","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Buffer Overflow Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2007-5659"},{"cveID":"CVE-2006-2492","vendorProject":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Malformed Object Pointer Vulnerability","dateAdded":"2022-06-08","dueDate":"2022-06-22","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2006-2492"},{"cveID":"CVE-2022-26134","vendorProject":"Atlassian","product":"Confluence Server/Data Center","vulnerabilityName":"Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability","dateAdded":"2022-06-02","dueDate":"2022-06-06","requiredAction":"Immediately block all internet traffic to and from affected products AND apply the update per vendor instructions [https://confluence.atlassian.com/doc/confluence-security-advisory-2022-06-02-1130377146.html] OR remove the affected products by the due date on the right. Note: Once the update is successfully deployed, agencies can reassess the internet blocking rules.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26134"},{"cveID":"CVE-2019-3010","vendorProject":"Oracle","product":"Solaris","vulnerabilityName":"Oracle Solaris Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-3010"},{"cveID":"CVE-2016-3393","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3393"},{"cveID":"CVE-2016-7256","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Open Type Font Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7256"},{"cveID":"CVE-2016-1010","vendorProject":"Adobe","product":"Flash Player and AIR","vulnerabilityName":"Adobe Flash Player and AIR Integer Overflow Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted products are end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1010"},{"cveID":"CVE-2016-0984","vendorProject":"Adobe","product":"Flash Player and AIR","vulnerabilityName":"Adobe Flash Player and AIR Use-After-Free Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted products are end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0984"},{"cveID":"CVE-2016-0034","vendorProject":"Microsoft","product":"Silverlight","vulnerabilityName":"Microsoft Silverlight Runtime Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted products are end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0034"},{"cveID":"CVE-2015-0310","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player ASLR Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0310"},{"cveID":"CVE-2015-0016","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows TS WebProxy Directory Traversal Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0016"},{"cveID":"CVE-2015-0071","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer ASLR Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0071"},{"cveID":"CVE-2015-2360","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2360"},{"cveID":"CVE-2015-2425","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2425"},{"cveID":"CVE-2015-1769","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Mount Manager Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1769"},{"cveID":"CVE-2015-4495","vendorProject":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Security Feature Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4495"},{"cveID":"CVE-2015-8651","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Integer Overflow Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-8651"},{"cveID":"CVE-2015-6175","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-6175"},{"cveID":"CVE-2015-1671","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1671"},{"cveID":"CVE-2014-4148","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4148"},{"cveID":"CVE-2014-8439","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Dereferenced Pointer Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-8439"},{"cveID":"CVE-2014-4123","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4123"},{"cveID":"CVE-2014-0546","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Sandbox Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0546"},{"cveID":"CVE-2014-2817","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-2817"},{"cveID":"CVE-2014-4077","vendorProject":"Microsoft","product":"Input Method Editor (IME) Japanese","vulnerabilityName":"Microsoft IME Japanese Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4077"},{"cveID":"CVE-2014-3153","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-3153"},{"cveID":"CVE-2013-7331","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-7331"},{"cveID":"CVE-2013-3993","vendorProject":"IBM","product":"InfoSphere BigInsights","vulnerabilityName":"IBM InfoSphere BigInsights Invalid Input Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3993"},{"cveID":"CVE-2013-3896","vendorProject":"Microsoft","product":"Silverlight","vulnerabilityName":"Microsoft Silverlight Information Disclosure Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3896"},{"cveID":"CVE-2013-2423","vendorProject":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Unspecified Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2423"},{"cveID":"CVE-2013-0431","vendorProject":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Sandbox Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0431"},{"cveID":"CVE-2013-0422","vendorProject":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Remote Code Execution Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0422"},{"cveID":"CVE-2013-0074","vendorProject":"Microsoft","product":"Silverlight","vulnerabilityName":"Microsoft Silverlight Double Dereference Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0074"},{"cveID":"CVE-2012-1710","vendorProject":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1710"},{"cveID":"CVE-2010-1428","vendorProject":"Red Hat","product":"JBoss","vulnerabilityName":"Red Hat JBoss Information Disclosure Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1428"},{"cveID":"CVE-2010-0840","vendorProject":"Oracle","product":"Java Runtime Environment (JRE)","vulnerabilityName":"Oracle JRE Unspecified Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0840"},{"cveID":"CVE-2010-0738","vendorProject":"Red Hat","product":"JBoss","vulnerabilityName":"Red Hat JBoss Authentication Bypass Vulnerability","dateAdded":"2022-05-25","dueDate":"2022-06-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0738"},{"cveID":"CVE-2018-8611","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8611"},{"cveID":"CVE-2018-19953","vendorProject":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS File Station Cross-Site Scripting Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-19953"},{"cveID":"CVE-2018-19949","vendorProject":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS File Station Command Injection Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-19949"},{"cveID":"CVE-2018-19943","vendorProject":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS File Station Cross-Site Scripting Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-19943"},{"cveID":"CVE-2017-0147","vendorProject":"Microsoft","product":"SMBv1 server","vulnerabilityName":"Microsoft Windows SMBv1 Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0147"},{"cveID":"CVE-2017-0022","vendorProject":"Microsoft","product":"XML Core Services","vulnerabilityName":"Microsoft XML Core Services Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0022"},{"cveID":"CVE-2017-0005","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0005"},{"cveID":"CVE-2017-0149","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0149"},{"cveID":"CVE-2017-0210","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Privilege Escalation Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0210"},{"cveID":"CVE-2017-8291","vendorProject":"Artifex","product":"Ghostscript","vulnerabilityName":"Artifex Ghostscript Type Confusion Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-8291"},{"cveID":"CVE-2017-8543","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Search Remote Code Execution Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-8543"},{"cveID":"CVE-2017-18362","vendorProject":"Kaseya","product":"Virtual System/Server Administrator (VSA)","vulnerabilityName":"Kaseya VSA SQL Injection Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-18362"},{"cveID":"CVE-2016-0162","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0162"},{"cveID":"CVE-2016-3351","vendorProject":"Microsoft","product":"Internet Explorer and Edge","vulnerabilityName":"Microsoft Internet Explorer and Edge Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3351"},{"cveID":"CVE-2016-4655","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4655"},{"cveID":"CVE-2016-4656","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Memory Corruption Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4656"},{"cveID":"CVE-2016-4657","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Webkit Memory Corruption Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4657"},{"cveID":"CVE-2016-6366","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) SNMP Buffer Overflow Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6366"},{"cveID":"CVE-2016-6367","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) CLI Remote Code Execution Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6367"},{"cveID":"CVE-2016-3298","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Messaging API Information Disclosure Vulnerability","dateAdded":"2022-05-24","dueDate":"2022-06-14","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3298"},{"cveID":"CVE-2022-20821","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Open Port Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20821"},{"cveID":"CVE-2021-1048","vendorProject":"Android","product":"Kernel","vulnerabilityName":"Android Kernel Use-After-Free Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1048"},{"cveID":"CVE-2021-0920","vendorProject":"Android","product":"Kernel","vulnerabilityName":"Android Kernel Race Condition Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-0920"},{"cveID":"CVE-2021-30883","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30883"},{"cveID":"CVE-2020-1027","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1027"},{"cveID":"CVE-2020-0638","vendorProject":"Microsoft","product":"Update Notification Manager","vulnerabilityName":"Microsoft Update Notification Manager Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0638"},{"cveID":"CVE-2019-7286","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7286"},{"cveID":"CVE-2019-7287","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7287"},{"cveID":"CVE-2019-0676","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0676"},{"cveID":"CVE-2019-5786","vendorProject":"Google","product":"Chrome Blink","vulnerabilityName":"Google Chrome Blink Use-After-Free Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5786"},{"cveID":"CVE-2019-0703","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SMB Information Disclosure Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0703"},{"cveID":"CVE-2019-0880","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0880"},{"cveID":"CVE-2019-13720","vendorProject":"Google","product":"Chrome WebAudio","vulnerabilityName":"Google Chrome WebAudio Use-After-Free Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-13720"},{"cveID":"CVE-2019-11707","vendorProject":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11707"},{"cveID":"CVE-2019-11708","vendorProject":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11708"},{"cveID":"CVE-2019-8720","vendorProject":"WebKitGTK","product":"WebKitGTK","vulnerabilityName":"WebKitGTK Memory Corruption Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8720"},{"cveID":"CVE-2019-18426","vendorProject":"Meta Platforms","product":"WhatsApp","vulnerabilityName":"WhatsApp Cross-Site Scripting Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-18426"},{"cveID":"CVE-2019-1385","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1385"},{"cveID":"CVE-2019-1130","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1130"},{"cveID":"CVE-2018-5002","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-5002"},{"cveID":"CVE-2018-8589","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8589"},{"cveID":"CVE-2022-30525","vendorProject":"Zyxel","product":"Multiple Firewalls","vulnerabilityName":"Zyxel Multiple Firewalls OS Command Injection Vulnerability","dateAdded":"2022-05-16","dueDate":"2022-06-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-30525"},{"cveID":"CVE-2022-22947","vendorProject":"VMware","product":"Spring Cloud Gateway","vulnerabilityName":"VMware Spring Cloud Gateway Code Injection Vulnerability","dateAdded":"2022-05-16","dueDate":"2022-06-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22947"},{"cveID":"CVE-2022-1388","vendorProject":"F5","product":"BIG-IP","vulnerabilityName":"F5 BIG-IP Missing Authentication Vulnerability","dateAdded":"2022-05-10","dueDate":"2022-05-31","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1388"},{"cveID":"CVE-2021-1789","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1789"},{"cveID":"CVE-2019-8506","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8506"},{"cveID":"CVE-2014-4113","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4113"},{"cveID":"CVE-2014-0322","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0322"},{"cveID":"CVE-2014-0160","vendorProject":"OpenSSL","product":"OpenSSL","vulnerabilityName":"OpenSSL Information Disclosure Vulnerability","dateAdded":"2022-05-04","dueDate":"2022-05-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0160"},{"cveID":"CVE-2022-29464","vendorProject":"WSO2","product":"Multiple Products","vulnerabilityName":"WSO2 Multiple Products Unrestrictive Upload of File Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-29464"},{"cveID":"CVE-2022-26904","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26904"},{"cveID":"CVE-2022-21919","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21919"},{"cveID":"CVE-2022-0847","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-0847"},{"cveID":"CVE-2021-41357","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41357"},{"cveID":"CVE-2021-40450","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40450"},{"cveID":"CVE-2019-1003029","vendorProject":"Jenkins","product":"Script Security Plugin","vulnerabilityName":"Jenkins Script Security Plugin Sandbox Bypass Vulnerability","dateAdded":"2022-04-25","dueDate":"2022-05-16","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003029"},{"cveID":"CVE-2018-6882","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2022-04-19","dueDate":"2022-05-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-6882"},{"cveID":"CVE-2019-3568","vendorProject":"Meta Platforms","product":"WhatsApp","vulnerabilityName":"WhatsApp VOIP Stack Buffer Overflow Vulnerability","dateAdded":"2022-04-19","dueDate":"2022-05-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-3568"},{"cveID":"CVE-2022-22718","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2022-04-19","dueDate":"2022-05-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22718"},{"cveID":"CVE-2022-22960","vendorProject":"VMware","product":"Multiple Products","vulnerabilityName":"VMware Multiple Products Privilege Escalation Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22960"},{"cveID":"CVE-2022-1364","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1364"},{"cveID":"CVE-2019-3929","vendorProject":"Crestron","product":"Multiple Products","vulnerabilityName":"Crestron Multiple Products Command Injection Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-3929"},{"cveID":"CVE-2019-16057","vendorProject":"D-Link","product":"DNS-320 Storage Device","vulnerabilityName":"D-Link DNS-320 Remote Code Execution Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-16057"},{"cveID":"CVE-2018-7841","vendorProject":"Schneider Electric","product":"U.motion Builder","vulnerabilityName":"Schneider Electric U.motion Builder SQL Injection Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-7841"},{"cveID":"CVE-2016-4523","vendorProject":"Trihedral","product":"VTScada (formerly VTS)","vulnerabilityName":"Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4523"},{"cveID":"CVE-2014-0780","vendorProject":"InduSoft","product":"Web Studio","vulnerabilityName":"InduSoft Web Studio NTWebServer Directory Traversal Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0780"},{"cveID":"CVE-2010-5330","vendorProject":"Ubiquiti","product":"AirOS","vulnerabilityName":"Ubiquiti AirOS Command Injection Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-5330"},{"cveID":"CVE-2007-3010","vendorProject":"Alcatel","product":"OmniPCX Enterprise","vulnerabilityName":"Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability","dateAdded":"2022-04-15","dueDate":"2022-05-06","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2007-3010"},{"cveID":"CVE-2022-22954","vendorProject":"VMware","product":"Workspace ONE Access and Identity Manager","vulnerabilityName":"VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability","dateAdded":"2022-04-14","dueDate":"2022-05-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22954"},{"cveID":"CVE-2022-24521","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows CLFS Driver Privilege Escalation Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-24521"},{"cveID":"CVE-2018-7602","vendorProject":"Drupal","product":"Core","vulnerabilityName":"Drupal Core Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-7602"},{"cveID":"CVE-2018-20753","vendorProject":"Kaseya","product":"Virtual System/Server Administrator (VSA)","vulnerabilityName":"Kaseya VSA Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-20753"},{"cveID":"CVE-2015-5123","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5123"},{"cveID":"CVE-2015-5122","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5122"},{"cveID":"CVE-2015-3113","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3113"},{"cveID":"CVE-2015-2502","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2502"},{"cveID":"CVE-2015-0313","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0313"},{"cveID":"CVE-2015-0311","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0311"},{"cveID":"CVE-2014-9163","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-13","dueDate":"2022-05-04","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-9163"},{"cveID":"CVE-2022-23176","vendorProject":"WatchGuard","product":"Firebox and XTM","vulnerabilityName":"WatchGuard Firebox and XTM Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-23176"},{"cveID":"CVE-2021-42287","vendorProject":"Microsoft","product":"Active Directory","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42287"},{"cveID":"CVE-2021-42278","vendorProject":"Microsoft","product":"Active Directory","vulnerabilityName":"Microsoft Active Directory Domain Services Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42278"},{"cveID":"CVE-2021-39793","vendorProject":"Google","product":"Pixel","vulnerabilityName":"Google Pixel Out-of-Bounds Write Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-39793"},{"cveID":"CVE-2021-27852","vendorProject":"Checkbox","product":"Checkbox Survey","vulnerabilityName":"Checkbox Survey Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Versions 6 and earlier for this product are end-of-life and must be removed from agency networks. Versions 7 and later are not considered vulnerable.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27852"},{"cveID":"CVE-2021-22600","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Privilege Escalation Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22600"},{"cveID":"CVE-2020-2509","vendorProject":"QNAP","product":"QNAP Network-Attached Storage (NAS)","vulnerabilityName":"QNAP Network-Attached Storage (NAS) Command Injection Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-2509"},{"cveID":"CVE-2017-11317","vendorProject":"Telerik","product":"User Interface (UI) for ASP.NET AJAX","vulnerabilityName":"Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability","dateAdded":"2022-04-11","dueDate":"2022-05-02","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11317"},{"cveID":"CVE-2021-3156","vendorProject":"Sudo","product":"Sudo","vulnerabilityName":"Sudo Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-04-06","dueDate":"2022-04-27","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-3156"},{"cveID":"CVE-2021-31166","vendorProject":"Microsoft","product":"HTTP Protocol Stack","vulnerabilityName":"Microsoft HTTP Protocol Stack Remote Code Execution Vulnerability","dateAdded":"2022-04-06","dueDate":"2022-04-27","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31166"},{"cveID":"CVE-2017-0148","vendorProject":"Microsoft","product":"SMBv1 server","vulnerabilityName":"Microsoft SMBv1 Server Remote Code Execution Vulnerability","dateAdded":"2022-04-06","dueDate":"2022-04-27","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0148"},{"cveID":"CVE-2022-22965","vendorProject":"VMware","product":"Spring Framework","vulnerabilityName":"Spring Framework JDK 9+ Remote Code Execution Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22965"},{"cveID":"CVE-2022-22675","vendorProject":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Out-of-Bounds Write Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22675"},{"cveID":"CVE-2022-22674","vendorProject":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Out-of-Bounds Read Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22674"},{"cveID":"CVE-2021-45382","vendorProject":"D-Link","product":"Multiple Routers","vulnerabilityName":"D-Link Multiple Routers Remote Code Execution Vulnerability","dateAdded":"2022-04-04","dueDate":"2022-04-25","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-45382"},{"cveID":"CVE-2022-26871","vendorProject":"Trend Micro","product":"Apex Central","vulnerabilityName":"Trend Micro Apex Central Arbitrary File Upload Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26871"},{"cveID":"CVE-2022-1040","vendorProject":"Sophos","product":"Firewall","vulnerabilityName":"Sophos Firewall Authentication Bypass Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1040"},{"cveID":"CVE-2021-34484","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows User Profile Service Privilege Escalation Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34484"},{"cveID":"CVE-2021-28799","vendorProject":"QNAP","product":"Network Attached Storage (NAS)","vulnerabilityName":"QNAP NAS Improper Authorization Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28799"},{"cveID":"CVE-2021-21551","vendorProject":"Dell","product":"dbutil Driver","vulnerabilityName":"Dell dbutil Driver Insufficient Access Control Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21551"},{"cveID":"CVE-2018-10562","vendorProject":"Dasan","product":"Gigabit Passive Optical Network (GPON) Routers","vulnerabilityName":"Dasan GPON Routers Command Injection Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-10562"},{"cveID":"CVE-2018-10561","vendorProject":"Dasan","product":"Gigabit Passive Optical Network (GPON) Routers","vulnerabilityName":"Dasan GPON Routers Authentication Bypass Vulnerability","dateAdded":"2022-03-31","dueDate":"2022-04-21","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-10561"},{"cveID":"CVE-2022-1096","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-1096"},{"cveID":"CVE-2022-0543","vendorProject":"Redis","product":"Debian-specific Redis Servers","vulnerabilityName":"Debian-specific Redis Server Lua Sandbox Escape Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-0543"},{"cveID":"CVE-2021-38646","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38646"},{"cveID":"CVE-2021-34486","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Event Tracing Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34486"},{"cveID":"CVE-2021-26085","vendorProject":"Atlassian","product":"Confluence Server","vulnerabilityName":"Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-26085"},{"cveID":"CVE-2021-20028","vendorProject":"SonicWall","product":"Secure Remote Access (SRA)","vulnerabilityName":"SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20028"},{"cveID":"CVE-2019-7483","vendorProject":"SonicWall","product":"SMA100","vulnerabilityName":"SonicWall SMA100 Directory Traversal Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7483"},{"cveID":"CVE-2018-8440","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8440"},{"cveID":"CVE-2018-8406","vendorProject":"Microsoft","product":"DirectX Graphics Kernel (DXGKRNL)","vulnerabilityName":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8406"},{"cveID":"CVE-2018-8405","vendorProject":"Microsoft","product":"DirectX Graphics Kernel (DXGKRNL)","vulnerabilityName":"Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8405"},{"cveID":"CVE-2017-0213","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0213"},{"cveID":"CVE-2017-0059","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Information Disclosure Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0059"},{"cveID":"CVE-2017-0037","vendorProject":"Microsoft","product":"Edge and Internet Explorer","vulnerabilityName":"Microsoft Edge and Internet Explorer Type Confusion Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0037"},{"cveID":"CVE-2016-7201","vendorProject":"Microsoft","product":"Edge","vulnerabilityName":"Microsoft Edge Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7201"},{"cveID":"CVE-2016-7200","vendorProject":"Microsoft","product":"Edge","vulnerabilityName":"Microsoft Edge Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7200"},{"cveID":"CVE-2016-0189","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0189"},{"cveID":"CVE-2016-0151","vendorProject":"Microsoft","product":"Client-Server Run-time Subsystem (CSRSS)","vulnerabilityName":"Microsoft Windows CSRSS Security Feature Bypass Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0151"},{"cveID":"CVE-2016-0040","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0040"},{"cveID":"CVE-2015-2426","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Adobe Type Manager Library Remote Code Execution Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2426"},{"cveID":"CVE-2015-2419","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2419"},{"cveID":"CVE-2015-1770","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Uninitialized Memory Use Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1770"},{"cveID":"CVE-2013-3660","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3660"},{"cveID":"CVE-2013-2729","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2729"},{"cveID":"CVE-2013-2551","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2551"},{"cveID":"CVE-2013-2465","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Unspecified Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2465"},{"cveID":"CVE-2013-1690","vendorProject":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690"},{"cveID":"CVE-2012-5076","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Sandbox Bypass Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-5076"},{"cveID":"CVE-2012-2539","vendorProject":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Remote Code Execution Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2539"},{"cveID":"CVE-2012-2034","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-2034"},{"cveID":"CVE-2012-0518","vendorProject":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0518"},{"cveID":"CVE-2011-2005","vendorProject":"Microsoft","product":"Ancillary Function Driver (afd.sys)","vulnerabilityName":"Microsoft Ancillary Function Driver (afd.sys) Improper Input Validation Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-2005"},{"cveID":"CVE-2010-4398","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-28","dueDate":"2022-04-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-4398"},{"cveID":"CVE-2022-26318","vendorProject":"WatchGuard","product":"Firebox and XTM Appliances","vulnerabilityName":"WatchGuard Firebox and XTM Appliances Arbitrary Code Execution","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26318"},{"cveID":"CVE-2022-26143","vendorProject":"Mitel","product":"MiCollab, MiVoice Business Express","vulnerabilityName":"MiCollab, MiVoice Business Express Access Control Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26143"},{"cveID":"CVE-2022-21999","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21999"},{"cveID":"CVE-2021-42237","vendorProject":"Sitecore","product":"XP","vulnerabilityName":"Sitecore XP Remote Command Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42237"},{"cveID":"CVE-2021-22941","vendorProject":"Citrix","product":"ShareFile","vulnerabilityName":"Citrix ShareFile Improper Access Control Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22941"},{"cveID":"CVE-2020-9377","vendorProject":"D-Link","product":"DIR-610 Devices","vulnerabilityName":"D-Link DIR-610 Devices Remote Command Execution","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-9377"},{"cveID":"CVE-2020-9054","vendorProject":"Zyxel","product":"Multiple Network-Attached Storage (NAS) Devices","vulnerabilityName":"Zyxel Multiple NAS Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-9054"},{"cveID":"CVE-2020-7247","vendorProject":"OpenBSD","product":"OpenSMTPD","vulnerabilityName":"OpenSMTPD Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-7247"},{"cveID":"CVE-2020-5410","vendorProject":"VMware Tanzu","product":"Spring Cloud Configuration (Config) Server","vulnerabilityName":"VMware Tanzu Spring Cloud Config Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5410"},{"cveID":"CVE-2020-25223","vendorProject":"Sophos","product":"SG UTM","vulnerabilityName":"Sophos SG UTM Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-25223"},{"cveID":"CVE-2020-2506","vendorProject":"QNAP Systems","product":"Helpdesk","vulnerabilityName":"QNAP Helpdesk Improper Access Control Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-2506"},{"cveID":"CVE-2020-2021","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Authentication Bypass Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-2021"},{"cveID":"CVE-2020-1956","vendorProject":"Apache","product":"Kylin","vulnerabilityName":"Apache Kylin OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1956"},{"cveID":"CVE-2020-1631","vendorProject":"Juniper","product":"Junos OS","vulnerabilityName":"Juniper Junos OS Path Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1631"},{"cveID":"CVE-2019-6340","vendorProject":"Drupal","product":"Core","vulnerabilityName":"Drupal Core Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-6340"},{"cveID":"CVE-2019-2616","vendorProject":"Oracle","product":"BI Publisher (Formerly XML Publisher)","vulnerabilityName":"Oracle BI Publisher Unauthorized Access Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-2616"},{"cveID":"CVE-2019-16920","vendorProject":"D-Link","product":"Multiple Routers","vulnerabilityName":"D-Link Multiple Routers Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-16920"},{"cveID":"CVE-2019-15107","vendorProject":"Webmin","product":"Webmin","vulnerabilityName":"Webmin Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-15107"},{"cveID":"CVE-2019-12991","vendorProject":"Citrix","product":"SD-WAN and NetScaler","vulnerabilityName":"Citrix SD-WAN and NetScaler Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-12991"},{"cveID":"CVE-2019-12989","vendorProject":"Citrix","product":"SD-WAN and NetScaler","vulnerabilityName":"Citrix SD-WAN and NetScaler SQL Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-12989"},{"cveID":"CVE-2019-11043","vendorProject":"PHP","product":"FastCGI Process Manager (FPM)","vulnerabilityName":"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11043"},{"cveID":"CVE-2019-10068","vendorProject":"Kentico","product":"Xperience","vulnerabilityName":"Kentico Xperience Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-10068"},{"cveID":"CVE-2019-1003030","vendorProject":"Jenkins","product":"Matrix Project Plugin","vulnerabilityName":"Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1003030"},{"cveID":"CVE-2019-0903","vendorProject":"Microsoft","product":"Graphics Device Interface (GDI)","vulnerabilityName":"Microsoft GDI Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0903"},{"cveID":"CVE-2018-8414","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Shell Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8414"},{"cveID":"CVE-2018-8373","vendorProject":"Microsoft","product":"Internet Explorer Scripting Engine","vulnerabilityName":"Microsoft Scripting Engine Memory Corruption Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8373"},{"cveID":"CVE-2018-6961","vendorProject":"VMware","product":"SD-WAN Edge","vulnerabilityName":"VMware SD-WAN Edge by VeloCloud Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-6961"},{"cveID":"CVE-2018-14839","vendorProject":"LG","product":"N1A1 NAS","vulnerabilityName":"LG N1A1 NAS Remote Command Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-14839"},{"cveID":"CVE-2018-1273","vendorProject":"VMware Tanzu","product":"Spring Data Commons","vulnerabilityName":"VMware Tanzu Spring Data Commons Property Binder Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-1273"},{"cveID":"CVE-2018-11138","vendorProject":"Quest","product":"KACE System Management Appliance","vulnerabilityName":"Quest KACE System Management Appliance Remote Command Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-11138"},{"cveID":"CVE-2018-0147","vendorProject":"Cisco","product":"Secure Access Control System (ACS)","vulnerabilityName":"Cisco Secure Access Control System Java Deserialization Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0147"},{"cveID":"CVE-2018-0125","vendorProject":"Cisco","product":"VPN Routers","vulnerabilityName":"Cisco VPN Routers Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0125"},{"cveID":"CVE-2017-6334","vendorProject":"NETGEAR","product":"DGN2200 Devices","vulnerabilityName":"NETGEAR DGN2200 Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6334"},{"cveID":"CVE-2017-6316","vendorProject":"Citrix","product":"NetScaler SD-WAN Enterprise, CloudBridge Virtual WAN, and XenMobile Server","vulnerabilityName":"Citrix Multiple Products Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6316"},{"cveID":"CVE-2017-3881","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-3881"},{"cveID":"CVE-2017-12617","vendorProject":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12617"},{"cveID":"CVE-2017-12615","vendorProject":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat on Windows Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12615"},{"cveID":"CVE-2017-0146","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SMB Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0146"},{"cveID":"CVE-2016-7892","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7892"},{"cveID":"CVE-2016-4171","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4171"},{"cveID":"CVE-2016-1555","vendorProject":"NETGEAR","product":"Wireless Access Point (WAP) Devices","vulnerabilityName":"NETGEAR Multiple WAP Devices Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1555"},{"cveID":"CVE-2016-11021","vendorProject":"D-Link","product":"DCS-930L Devices","vulnerabilityName":"D-Link DCS-930L Devices OS Command Injection Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-11021"},{"cveID":"CVE-2016-10174","vendorProject":"NETGEAR","product":"WNR2000v5 Router","vulnerabilityName":"NETGEAR WNR2000v5 Router Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-10174"},{"cveID":"CVE-2016-0752","vendorProject":"Rails","product":"Ruby on Rails","vulnerabilityName":"Ruby on Rails Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0752"},{"cveID":"CVE-2015-4068","vendorProject":"Arcserve","product":"Unified Data Protection (UDP)","vulnerabilityName":"Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4068"},{"cveID":"CVE-2015-3035","vendorProject":"TP-Link","product":"Multiple Archer Devices","vulnerabilityName":"TP-Link Multiple Archer Devices Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3035"},{"cveID":"CVE-2015-1427","vendorProject":"Elastic","product":"Elasticsearch","vulnerabilityName":"Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1427"},{"cveID":"CVE-2015-1187","vendorProject":"D-Link and TRENDnet","product":"Multiple Devices","vulnerabilityName":"D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1187"},{"cveID":"CVE-2015-0666","vendorProject":"Cisco","product":"Prime Data Center Network Manager (DCNM)","vulnerabilityName":"Cisco Prime Data Center Network Manager (DCNM) Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-0666"},{"cveID":"CVE-2014-6332","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Object Linking & Embedding (OLE) Automation Array Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-6332"},{"cveID":"CVE-2014-6324","vendorProject":"Microsoft","product":"Kerberos Key Distribution Center (KDC)","vulnerabilityName":"Microsoft Kerberos Key Distribution Center (KDC) Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-6324"},{"cveID":"CVE-2014-6287","vendorProject":"Rejetto","product":"HTTP File Server (HFS)","vulnerabilityName":"Rejetto HTTP File Server (HFS) Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-6287"},{"cveID":"CVE-2014-3120","vendorProject":"Elastic","product":"Elasticsearch","vulnerabilityName":"Elasticsearch Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-3120"},{"cveID":"CVE-2014-0130","vendorProject":"Rails","product":"Ruby on Rails","vulnerabilityName":"Ruby on Rails Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0130"},{"cveID":"CVE-2013-5223","vendorProject":"D-Link","product":"DSL-2760U","vulnerabilityName":"D-Link DSL-2760U Gateway Cross-Site Scripting Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-5223"},{"cveID":"CVE-2013-4810","vendorProject":"Hewlett Packard (HP)","product":"ProCurve Manager (PCM), PCM+, Identity Driven Manager (IDM), and Application Lifecycle Management","vulnerabilityName":"HP Multiple Products Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-4810"},{"cveID":"CVE-2013-2251","vendorProject":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Improper Input Validation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-2251"},{"cveID":"CVE-2012-1823","vendorProject":"PHP","product":"PHP","vulnerabilityName":"PHP-CGI Query String Parameter Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1823"},{"cveID":"CVE-2010-4345","vendorProject":"Exim","product":"Exim","vulnerabilityName":"Exim Privilege Escalation Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-4345"},{"cveID":"CVE-2010-4344","vendorProject":"Exim","product":"Exim","vulnerabilityName":"Exim Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-4344"},{"cveID":"CVE-2010-3035","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-3035"},{"cveID":"CVE-2010-2861","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Directory Traversal Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-2861"},{"cveID":"CVE-2009-2055","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Border Gateway Protocol (BGP) Denial-of-Service Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-2055"},{"cveID":"CVE-2009-1151","vendorProject":"phpMyAdmin","product":"phpMyAdmin","vulnerabilityName":"phpMyAdmin Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-1151"},{"cveID":"CVE-2009-0927","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Adobe Acrobat Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-0927"},{"cveID":"CVE-2005-2773","vendorProject":"Hewlett Packard (HP)","product":"OpenView Network Node Manager","vulnerabilityName":"HP OpenView Network Node Manager Remote Code Execution Vulnerability","dateAdded":"2022-03-25","dueDate":"2022-04-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2005-2773"},{"cveID":"CVE-2020-5135","vendorProject":"SonicWall","product":"SonicOS","vulnerabilityName":"SonicWall SonicOS Buffer Overflow Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5135"},{"cveID":"CVE-2019-1405","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1405"},{"cveID":"CVE-2019-1322","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1322"},{"cveID":"CVE-2019-1315","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1315"},{"cveID":"CVE-2019-1253","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1253"},{"cveID":"CVE-2019-1132","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1132"},{"cveID":"CVE-2019-1129","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1129"},{"cveID":"CVE-2019-1069","vendorProject":"Microsoft","product":"Task Scheduler","vulnerabilityName":"Microsoft Task Scheduler Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1069"},{"cveID":"CVE-2019-1064","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1064"},{"cveID":"CVE-2019-0841","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0841"},{"cveID":"CVE-2019-0543","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0543"},{"cveID":"CVE-2018-8120","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8120"},{"cveID":"CVE-2017-0101","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Transaction Manager Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0101"},{"cveID":"CVE-2016-3309","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3309"},{"cveID":"CVE-2015-2546","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Memory Corruption Vulnerability","dateAdded":"2022-03-15","dueDate":"2022-04-05","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2546"},{"cveID":"CVE-2022-26486","vendorProject":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-03-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26486"},{"cveID":"CVE-2022-26485","vendorProject":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Use-After-Free Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-03-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-26485"},{"cveID":"CVE-2021-21973","vendorProject":"VMware","product":"vCenter Server and Cloud Foundation","vulnerabilityName":"VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-03-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21973"},{"cveID":"CVE-2020-8218","vendorProject":"Pulse Secure","product":"Pulse Connect Secure","vulnerabilityName":"Pulse Connect Secure Code Injection Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8218"},{"cveID":"CVE-2019-11581","vendorProject":"Atlassian","product":"Jira Server and Data Center","vulnerabilityName":"Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11581"},{"cveID":"CVE-2017-6077","vendorProject":"NETGEAR","product":"Wireless Router DGN2200","vulnerabilityName":"NETGEAR DGN2200 Remote Code Execution Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6077"},{"cveID":"CVE-2016-6277","vendorProject":"NETGEAR","product":"Multiple Routers","vulnerabilityName":"NETGEAR Multiple Routers Remote Code Execution Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-6277"},{"cveID":"CVE-2013-0631","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Information Disclosure Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0631"},{"cveID":"CVE-2013-0629","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Directory Traversal Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0629"},{"cveID":"CVE-2013-0625","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Authentication Bypass Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0625"},{"cveID":"CVE-2009-3960","vendorProject":"Adobe","product":"BlazeDS","vulnerabilityName":"Adobe BlazeDS Information Disclosure Vulnerability","dateAdded":"2022-03-07","dueDate":"2022-09-07","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3960"},{"cveID":"CVE-2022-20708","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20708"},{"cveID":"CVE-2022-20703","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20703"},{"cveID":"CVE-2022-20701","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20701"},{"cveID":"CVE-2022-20700","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20700"},{"cveID":"CVE-2022-20699","vendorProject":"Cisco","product":"Small Business RV160, RV260, RV340, and RV345 Series Routers","vulnerabilityName":"Cisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-20699"},{"cveID":"CVE-2021-41379","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Installer Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41379"},{"cveID":"CVE-2020-1938","vendorProject":"Apache","product":"Tomcat","vulnerabilityName":"Apache Tomcat Improper Privilege Management Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1938"},{"cveID":"CVE-2020-11899","vendorProject":"Treck TCP/IP stack","product":"IPv6","vulnerabilityName":"Treck TCP/IP stack Out-of-Bounds Read Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-11899"},{"cveID":"CVE-2019-16928","vendorProject":"Exim","product":"Exim Internet Mailer","vulnerabilityName":"Exim Out-of-bounds Write Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-16928"},{"cveID":"CVE-2019-1652","vendorProject":"Cisco","product":"Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers","vulnerabilityName":"Cisco Small Business Routers Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1652"},{"cveID":"CVE-2019-1297","vendorProject":"Microsoft","product":"Excel","vulnerabilityName":"Microsoft Excel Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1297"},{"cveID":"CVE-2018-8581","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8581"},{"cveID":"CVE-2018-8298","vendorProject":"ChakraCore","product":"ChakraCore scripting engine","vulnerabilityName":"ChakraCore Scripting Engine Type Confusion Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8298"},{"cveID":"CVE-2018-0180","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0180"},{"cveID":"CVE-2018-0179","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0179"},{"cveID":"CVE-2018-0175","vendorProject":"Cisco","product":"IOS, XR, and XE Software","vulnerabilityName":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0175"},{"cveID":"CVE-2018-0174","vendorProject":"Cisco","product":"IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0174"},{"cveID":"CVE-2018-0173","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0173"},{"cveID":"CVE-2018-0172","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0172"},{"cveID":"CVE-2018-0167","vendorProject":"Cisco","product":"IOS, XR, and XE Software","vulnerabilityName":"Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0167"},{"cveID":"CVE-2018-0161","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Resource Management Errors Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0161"},{"cveID":"CVE-2018-0159","vendorProject":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS and XE Software Internet Key Exchange Version 1 Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0159"},{"cveID":"CVE-2018-0158","vendorProject":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS and XE Software Internet Key Exchange Memory Leak Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0158"},{"cveID":"CVE-2018-0156","vendorProject":"Cisco","product":"IOS Software and Cisco IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Smart Install Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0156"},{"cveID":"CVE-2018-0155","vendorProject":"Cisco","product":"Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches","vulnerabilityName":"Cisco Catalyst Bidirectional Forwarding Detection Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0155"},{"cveID":"CVE-2018-0154","vendorProject":"Cisco","product":"IOS Software","vulnerabilityName":"Cisco IOS Software Integrated Services Module for VPN Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0154"},{"cveID":"CVE-2018-0151","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0151"},{"cveID":"CVE-2017-8540","vendorProject":"Microsoft","product":"Malware Protection Engine","vulnerabilityName":"Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-8540"},{"cveID":"CVE-2017-6744","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6744"},{"cveID":"CVE-2017-6743","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6743"},{"cveID":"CVE-2017-6740","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6740"},{"cveID":"CVE-2017-6739","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6739"},{"cveID":"CVE-2017-6738","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6738"},{"cveID":"CVE-2017-6737","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6737"},{"cveID":"CVE-2017-6736","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6736"},{"cveID":"CVE-2017-6663","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6663"},{"cveID":"CVE-2017-6627","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS Software and Cisco IOS XE Software UDP Packet Processing Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6627"},{"cveID":"CVE-2017-12319","vendorProject":"Cisco","product":"IOS XE Software","vulnerabilityName":"Cisco IOS XE Software Ethernet Virtual Private Network Border Gateway Protocol Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12319"},{"cveID":"CVE-2017-12240","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software DHCP Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12240"},{"cveID":"CVE-2017-12238","vendorProject":"Cisco","product":"Catalyst 6800 Series Switches","vulnerabilityName":"Cisco Catalyst 6800 Series Switches VPLS Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12238"},{"cveID":"CVE-2017-12237","vendorProject":"Cisco","product":"IOS and IOS XE Software","vulnerabilityName":"Cisco IOS and IOS XE Software Internet Key Exchange Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12237"},{"cveID":"CVE-2017-12235","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software for Cisco Industrial Ethernet Switches PROFINET Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12235"},{"cveID":"CVE-2017-12234","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12234"},{"cveID":"CVE-2017-12233","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Common Industrial Protocol Request Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12233"},{"cveID":"CVE-2017-12232","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software for Cisco Integrated Services Routers Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12232"},{"cveID":"CVE-2017-12231","vendorProject":"Cisco","product":"IOS software","vulnerabilityName":"Cisco IOS Software Network Address Translation Denial-of-Service Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12231"},{"cveID":"CVE-2017-11826","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11826"},{"cveID":"CVE-2017-11292","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Type Confusion Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11292"},{"cveID":"CVE-2017-0261","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0261"},{"cveID":"CVE-2017-0001","vendorProject":"Microsoft","product":"Graphics Device Interface (GDI)","vulnerabilityName":"Microsoft Graphics Device Interface (GDI) Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0001"},{"cveID":"CVE-2016-8562","vendorProject":"Siemens","product":"SIMATIC CP","vulnerabilityName":"Siemens SIMATIC CP 1543-1 Improper Privilege Management Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-8562"},{"cveID":"CVE-2016-7855","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7855"},{"cveID":"CVE-2016-7262","vendorProject":"Microsoft","product":"Excel","vulnerabilityName":"Microsoft Office Security Feature Bypass Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7262"},{"cveID":"CVE-2016-7193","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7193"},{"cveID":"CVE-2016-5195","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Race Condition Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-5195"},{"cveID":"CVE-2016-4117","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4117"},{"cveID":"CVE-2016-1019","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-1019"},{"cveID":"CVE-2016-0099","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0099"},{"cveID":"CVE-2015-7645","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7645"},{"cveID":"CVE-2015-5119","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-5119"},{"cveID":"CVE-2015-4902","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Integrity Check Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4902"},{"cveID":"CVE-2015-3043","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-3043"},{"cveID":"CVE-2015-2590","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2590"},{"cveID":"CVE-2015-2545","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Malformed EPS File Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2545"},{"cveID":"CVE-2015-2424","vendorProject":"Microsoft","product":"PowerPoint","vulnerabilityName":"Microsoft PowerPoint Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2424"},{"cveID":"CVE-2015-2387","vendorProject":"Microsoft","product":"ATM Font Driver","vulnerabilityName":"Microsoft ATM Font Driver Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2387"},{"cveID":"CVE-2015-1701","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1701"},{"cveID":"CVE-2015-1642","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1642"},{"cveID":"CVE-2014-4114","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Object Linking & Embedding (OLE) Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4114"},{"cveID":"CVE-2014-0496","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-0496"},{"cveID":"CVE-2013-5065","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-5065"},{"cveID":"CVE-2013-3897","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Use-After-Free Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3897"},{"cveID":"CVE-2013-3346","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3346"},{"cveID":"CVE-2013-1675","vendorProject":"Mozilla","product":"Firefox","vulnerabilityName":"Mozilla Firefox Information Disclosure Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1675"},{"cveID":"CVE-2013-1347","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1347"},{"cveID":"CVE-2013-0641","vendorProject":"Adobe","product":"Reader","vulnerabilityName":"Adobe Reader Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0641"},{"cveID":"CVE-2013-0640","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0640"},{"cveID":"CVE-2013-0632","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Authentication Bypass Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-0632"},{"cveID":"CVE-2012-4681","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-4681"},{"cveID":"CVE-2012-1856","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office MSCOMCTL.OCX Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1856"},{"cveID":"CVE-2012-1723","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1723"},{"cveID":"CVE-2012-1535","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-1535"},{"cveID":"CVE-2012-0507","vendorProject":"Oracle","product":"Java SE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0507"},{"cveID":"CVE-2011-3544","vendorProject":"Oracle","product":"Java SE JDK and JRE","vulnerabilityName":"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-3544"},{"cveID":"CVE-2011-1889","vendorProject":"Microsoft","product":"Forefront Threat Management Gateway (TMG)","vulnerabilityName":"Microsoft Forefront TMG Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-1889"},{"cveID":"CVE-2011-0611","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Remote Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2011-0611"},{"cveID":"CVE-2010-3333","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Stack-based Buffer Overflow Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-3333"},{"cveID":"CVE-2010-0232","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Exception Handler Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0232"},{"cveID":"CVE-2010-0188","vendorProject":"Adobe","product":"Reader and Acrobat","vulnerabilityName":"Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0188"},{"cveID":"CVE-2009-3129","vendorProject":"Microsoft","product":"Excel","vulnerabilityName":"Microsoft Excel Featheader Record Memory Corruption Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-3129"},{"cveID":"CVE-2009-1123","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Improper Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2009-1123"},{"cveID":"CVE-2008-3431","vendorProject":"Oracle","product":"VirtualBox","vulnerabilityName":"Oracle VirtualBox Insufficient Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-3431"},{"cveID":"CVE-2008-2992","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Reader and Acrobat Input Validation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2008-2992"},{"cveID":"CVE-2004-0210","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2004-0210"},{"cveID":"CVE-2002-0367","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2022-03-03","dueDate":"2022-03-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2002-0367"},{"cveID":"CVE-2022-24682","vendorProject":"Synacor","product":"Zimbra Collaborate Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-03-11","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-24682"},{"cveID":"CVE-2017-8570","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-08-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-8570"},{"cveID":"CVE-2017-0222","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-08-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0222"},{"cveID":"CVE-2014-6352","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Code Injection Vulnerability","dateAdded":"2022-02-25","dueDate":"2022-08-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-6352"},{"cveID":"CVE-2022-23131","vendorProject":"Zabbix","product":"Frontend","vulnerabilityName":"Zabbix Frontend Authentication Bypass Vulnerability","dateAdded":"2022-02-22","dueDate":"2022-03-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-23131"},{"cveID":"CVE-2022-23134","vendorProject":"Zabbix","product":"Frontend","vulnerabilityName":"Zabbix Frontend Improper Access Control Vulnerability","dateAdded":"2022-02-22","dueDate":"2022-03-08","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-23134"},{"cveID":"CVE-2022-24086","vendorProject":"Adobe","product":"Commerce and Magento Open Source","vulnerabilityName":"Adobe Commerce and Magento Open Source Improper Input Validation Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-03-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-24086"},{"cveID":"CVE-2022-0609","vendorProject":"Google","product":"Chromium Animation","vulnerabilityName":"Google Chromium Animation Use-After-Free Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-03-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-0609"},{"cveID":"CVE-2019-0752","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Type Confusion Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0752"},{"cveID":"CVE-2018-8174","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8174"},{"cveID":"CVE-2018-20250","vendorProject":"RARLAB","product":"WinRAR","vulnerabilityName":"WinRAR Absolute Path Traversal Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-20250"},{"cveID":"CVE-2018-15982","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15982"},{"cveID":"CVE-2017-9841","vendorProject":"PHPUnit","product":"PHPUnit","vulnerabilityName":"PHPUnit Command Injection Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-9841"},{"cveID":"CVE-2014-1761","vendorProject":"Microsoft","product":"Word","vulnerabilityName":"Microsoft Word Memory Corruption Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-1761"},{"cveID":"CVE-2013-3906","vendorProject":"Microsoft","product":"Graphics Component","vulnerabilityName":"Microsoft Graphics Component Memory Corruption Vulnerability","dateAdded":"2022-02-15","dueDate":"2022-08-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3906"},{"cveID":"CVE-2022-22620","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Webkit Use-After-Free Vulnerability","dateAdded":"2022-02-11","dueDate":"2022-02-25","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22620"},{"cveID":"CVE-2021-36934","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows SAM Local Privilege Escalation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-02-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-36934"},{"cveID":"CVE-2020-0796","vendorProject":"Microsoft","product":"SMBv3","vulnerabilityName":"Microsoft SMBv3 Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0796"},{"cveID":"CVE-2018-1000861","vendorProject":"Jenkins","product":"Jenkins Stapler Web Framework","vulnerabilityName":"Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000861"},{"cveID":"CVE-2017-9791","vendorProject":"Apache","product":"Struts 1","vulnerabilityName":"Apache Struts 1 Improper Input Validation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-9791"},{"cveID":"CVE-2017-8464","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-8464"},{"cveID":"CVE-2017-10271","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle Corporation WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-10271"},{"cveID":"CVE-2017-0263","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0263"},{"cveID":"CVE-2017-0262","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0262"},{"cveID":"CVE-2017-0145","vendorProject":"Microsoft","product":"SMBv1","vulnerabilityName":"Microsoft SMBv1 Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0145"},{"cveID":"CVE-2017-0144","vendorProject":"Microsoft","product":"SMBv1","vulnerabilityName":"Microsoft SMBv1 Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0144"},{"cveID":"CVE-2016-3088","vendorProject":"Apache","product":"ActiveMQ","vulnerabilityName":"Apache ActiveMQ Improper Input Validation Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3088"},{"cveID":"CVE-2015-2051","vendorProject":"D-Link","product":"DIR-645 Router","vulnerabilityName":"D-Link DIR-645 Router Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-2051"},{"cveID":"CVE-2015-1635","vendorProject":"Microsoft","product":"HTTP.sys","vulnerabilityName":"Microsoft HTTP.sys Remote Code Execution Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1635"},{"cveID":"CVE-2015-1130","vendorProject":"Apple","product":"OS X","vulnerabilityName":"Apple OS X Authentication Bypass Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1130"},{"cveID":"CVE-2014-4404","vendorProject":"Apple","product":"OS X","vulnerabilityName":"Apple OS X Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-02-10","dueDate":"2022-08-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-4404"},{"cveID":"CVE-2022-21882","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-02-04","dueDate":"2022-02-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-21882"},{"cveID":"CVE-2022-22587","vendorProject":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple Memory Corruption Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-02-11","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2022-22587"},{"cveID":"CVE-2021-20038","vendorProject":"SonicWall","product":"SMA 100 Appliances","vulnerabilityName":"SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-02-11","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20038"},{"cveID":"CVE-2020-5722","vendorProject":"Grandstream","product":"UCM6200","vulnerabilityName":"Grandstream Networks UCM6200 Series SQL Injection Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5722"},{"cveID":"CVE-2020-0787","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0787"},{"cveID":"CVE-2017-5689","vendorProject":"Intel","product":"Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability","vulnerabilityName":"Intel Active Management Technology (AMT), Small Business Technology (SBT), and Standard Manageability Privilege Escalation Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5689"},{"cveID":"CVE-2014-1776","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://learn.microsoft.com/en-us/security-updates/SecurityBulletins/2014/ms14-021?redirectedfrom=MSDN; https://nvd.nist.gov/vuln/detail/CVE-2014-1776"},{"cveID":"CVE-2014-6271","vendorProject":"GNU","product":"Bourne-Again Shell (Bash)","vulnerabilityName":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-6271"},{"cveID":"CVE-2014-7169","vendorProject":"GNU","product":"Bourne-Again Shell (Bash)","vulnerabilityName":"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","dateAdded":"2022-01-28","dueDate":"2022-07-28","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-7169"},{"cveID":"CVE-2006-1547","vendorProject":"Apache","product":"Struts 1","vulnerabilityName":"Apache Struts 1 ActionForm Denial-of-Service Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-07-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2006-1547"},{"cveID":"CVE-2012-0391","vendorProject":"Apache","product":"Struts 2","vulnerabilityName":"Apache Struts 2 Improper Input Validation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-07-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0391"},{"cveID":"CVE-2018-8453","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-07-21","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8453"},{"cveID":"CVE-2021-35247","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Improper Input Validation Vulnerability","dateAdded":"2022-01-21","dueDate":"2022-02-04","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35247"},{"cveID":"CVE-2021-32648","vendorProject":"October CMS","product":"October CMS","vulnerabilityName":"October CMS Improper Authentication","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-32648"},{"cveID":"CVE-2021-25296","vendorProject":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI OS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-25296"},{"cveID":"CVE-2021-25297","vendorProject":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI OS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-25297"},{"cveID":"CVE-2021-25298","vendorProject":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI OS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-25298"},{"cveID":"CVE-2021-40870","vendorProject":"Aviatrix","product":"Aviatrix Controller","vulnerabilityName":"Aviatrix Controller Unrestricted Upload of File","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40870"},{"cveID":"CVE-2021-33766","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Information Disclosure","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33766"},{"cveID":"CVE-2021-21975","vendorProject":"VMware","product":"vRealize Operations Manager API","vulnerabilityName":"VMware Server Side Request Forgery in vRealize Operations Manager API","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21975"},{"cveID":"CVE-2021-21315","vendorProject":"Npm package","product":"System Information Library for Node.JS","vulnerabilityName":"System Information Library for Node.JS Command Injection","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21315"},{"cveID":"CVE-2021-22991","vendorProject":"F5","product":"BIG-IP Traffic Management Microkernel","vulnerabilityName":"F5 BIG-IP Traffic Management Microkernel Buffer Overflow","dateAdded":"2022-01-18","dueDate":"2022-02-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22991"},{"cveID":"CVE-2020-14864","vendorProject":"Oracle","product":"Intelligence Enterprise Edition","vulnerabilityName":"Oracle Business Intelligence Enterprise Edition Path Transversal","dateAdded":"2022-01-18","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14864"},{"cveID":"CVE-2020-13671","vendorProject":"Drupal","product":"Drupal core","vulnerabilityName":"Drupal core Un-restricted Upload of File","dateAdded":"2022-01-18","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-13671"},{"cveID":"CVE-2020-11978","vendorProject":"Apache","product":"Airflow","vulnerabilityName":"Apache Airflow Command Injection","dateAdded":"2022-01-18","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-11978"},{"cveID":"CVE-2020-13927","vendorProject":"Apache","product":"Airflow's Experimental API","vulnerabilityName":"Apache Airflow's Experimental API Authentication Bypass","dateAdded":"2022-01-18","dueDate":"2022-07-18","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-13927"},{"cveID":"CVE-2021-22017","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Improper Access Control","dateAdded":"2022-01-10","dueDate":"2022-01-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22017"},{"cveID":"CVE-2021-36260","vendorProject":"Hikvision","product":"Security cameras web server","vulnerabilityName":"Hikvision Improper Input Validation","dateAdded":"2022-01-10","dueDate":"2022-01-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-36260"},{"cveID":"CVE-2020-6572","vendorProject":"Google","product":"Chrome Media","vulnerabilityName":"Google Chrome Media Use-After-Free Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6572"},{"cveID":"CVE-2019-1458","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1458"},{"cveID":"CVE-2013-3900","vendorProject":"Microsoft","product":"WinVerifyTrust function","vulnerabilityName":"Microsoft WinVerifyTrust function Remote Code Execution","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-3900"},{"cveID":"CVE-2019-2725","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server, Injection","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-2725"},{"cveID":"CVE-2019-9670","vendorProject":"Synacor","product":"Zimbra Collaboration Suite (ZCS)","vulnerabilityName":"Synacor Zimbra Collaboration Suite (ZCS) Improper Restriction of XML External Entity Reference","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-9670"},{"cveID":"CVE-2018-13382","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Improper Authorization","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382"},{"cveID":"CVE-2018-13383","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13383"},{"cveID":"CVE-2019-1579","vendorProject":"Palo Alto Networks","product":"PAN-OS","vulnerabilityName":"Palo Alto Networks PAN-OS Remote Code Execution Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1579"},{"cveID":"CVE-2019-10149","vendorProject":"Exim","product":"Mail Transfer Agent (MTA)","vulnerabilityName":"Exim Mail Transfer Agent (MTA) Improper Input Validation","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-10149"},{"cveID":"CVE-2015-7450","vendorProject":"IBM","product":"WebSphere Application Server and Server Hypervisor Edition","vulnerabilityName":"IBM WebSphere Application Server and Server Hypervisor Edition Code Injection.","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-7450"},{"cveID":"CVE-2017-1000486","vendorProject":"Primetek","product":"Primefaces Application","vulnerabilityName":"Primetek Primefaces Remote Code Execution Vulnerability","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-1000486"},{"cveID":"CVE-2019-7609","vendorProject":"Elastic","product":"Kibana","vulnerabilityName":"Kibana Arbitrary Code Execution","dateAdded":"2022-01-10","dueDate":"2022-07-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7609"},{"cveID":"CVE-2021-27860","vendorProject":"FatPipe","product":"WARP, IPVPN, and MPVPN software","vulnerabilityName":"FatPipe WARP, IPVPN, and MPVPN Configuration Upload exploit","dateAdded":"2022-01-10","dueDate":"2022-01-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27860"},{"cveID":"CVE-2021-43890","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows AppX Installer Spoofing Vulnerability","dateAdded":"2021-12-15","dueDate":"2021-12-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-43890"},{"cveID":"CVE-2021-4102","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Use-After-Free Vulnerability","dateAdded":"2021-12-15","dueDate":"2021-12-29","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-4102"},{"cveID":"CVE-2021-44515","vendorProject":"Zoho","product":"Desktop Central","vulnerabilityName":"Zoho Desktop Central Authentication Bypass Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-44515"},{"cveID":"CVE-2019-13272","vendorProject":"Linux","product":"Kernel","vulnerabilityName":"Linux Kernel Improper Privilege Management Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-13272"},{"cveID":"CVE-2021-35394","vendorProject":"Realtek","product":"Jungle Software Development Kit (SDK)","vulnerabilityName":"Realtek Jungle SDK Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35394"},{"cveID":"CVE-2019-7238","vendorProject":"Sonatype","product":"Nexus Repository Manager","vulnerabilityName":"Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7238"},{"cveID":"CVE-2019-0193","vendorProject":"Apache","product":"Solr","vulnerabilityName":"Apache Solr DataImportHandler Code Injection Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0193"},{"cveID":"CVE-2021-44168","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Arbitrary File Download","dateAdded":"2021-12-10","dueDate":"2021-12-24","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-44168"},{"cveID":"CVE-2017-17562","vendorProject":"Embedthis","product":"GoAhead","vulnerabilityName":"Embedthis GoAhead Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-17562"},{"cveID":"CVE-2017-12149","vendorProject":"Red Hat","product":"JBoss Application Server","vulnerabilityName":"Red Hat JBoss Application Server Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-12149"},{"cveID":"CVE-2010-1871","vendorProject":"Red Hat","product":"JBoss Seam 2","vulnerabilityName":"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-1871"},{"cveID":"CVE-2020-17463","vendorProject":"Fuel CMS","product":"Fuel CMS","vulnerabilityName":"Fuel CMS SQL Injection Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17463"},{"cveID":"CVE-2020-8816","vendorProject":"Pi-hole","product":"AdminLTE","vulnerabilityName":"Pi-Hole AdminLTE Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8816"},{"cveID":"CVE-2019-10758","vendorProject":"MongoDB","product":"mongo-express","vulnerabilityName":"MongoDB mongo-express Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2022-06-10","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-10758"},{"cveID":"CVE-2021-44228","vendorProject":"Apache","product":"Log4j2","vulnerabilityName":"Apache Log4j2 Remote Code Execution Vulnerability","dateAdded":"2021-12-10","dueDate":"2021-12-24","requiredAction":"For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-44228"},{"cveID":"CVE-2020-11261","vendorProject":"Qualcomm","product":"Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables","vulnerabilityName":"Qualcomm Multiple Chipsets Improper Input Validation Vulnerability","dateAdded":"2021-12-01","dueDate":"2022-06-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-11261"},{"cveID":"CVE-2018-14847","vendorProject":"MikroTik","product":"RouterOS","vulnerabilityName":"MikroTik Router OS Directory Traversal Vulnerability","dateAdded":"2021-12-01","dueDate":"2022-06-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-14847"},{"cveID":"CVE-2021-37415","vendorProject":"Zoho","product":"ManageEngine ServiceDesk Plus (SDP)","vulnerabilityName":"Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability","dateAdded":"2021-12-01","dueDate":"2021-12-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-37415"},{"cveID":"CVE-2021-40438","vendorProject":"Apache","product":"Apache","vulnerabilityName":"Apache HTTP Server-Side Request Forgery (SSRF)","dateAdded":"2021-12-01","dueDate":"2021-12-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40438"},{"cveID":"CVE-2021-44077","vendorProject":"Zoho","product":"ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability","dateAdded":"2021-12-01","dueDate":"2021-12-15","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-44077"},{"cveID":"CVE-2021-22204","vendorProject":"Perl","product":"Exiftool","vulnerabilityName":"ExifTool Remote Code Execution Vulnerability","dateAdded":"2021-11-17","dueDate":"2021-12-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22204"},{"cveID":"CVE-2021-40449","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-17","dueDate":"2021-12-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40449"},{"cveID":"CVE-2021-42321","vendorProject":"Microsoft","product":"Exchange","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-17","dueDate":"2021-12-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42321"},{"cveID":"CVE-2021-42292","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Excel Security Feature Bypass","dateAdded":"2021-11-17","dueDate":"2021-12-01","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42292"},{"cveID":"CVE-2021-27104","vendorProject":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA OS Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27104"},{"cveID":"CVE-2021-27102","vendorProject":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA OS Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27102"},{"cveID":"CVE-2021-27101","vendorProject":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27101"},{"cveID":"CVE-2021-27103","vendorProject":"Accellion","product":"FTA","vulnerabilityName":"Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27103"},{"cveID":"CVE-2021-21017","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21017"},{"cveID":"CVE-2021-28550","vendorProject":"Adobe","product":"Acrobat and Reader","vulnerabilityName":"Adobe Acrobat and Reader Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28550"},{"cveID":"CVE-2018-4939","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4939"},{"cveID":"CVE-2018-15961","vendorProject":"Adobe","product":"ColdFusion","vulnerabilityName":"Adobe ColdFusion Unrestricted File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15961"},{"cveID":"CVE-2018-4878","vendorProject":"Adobe","product":"Flash Player","vulnerabilityName":"Adobe Flash Player Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-4878"},{"cveID":"CVE-2020-5735","vendorProject":"Amcrest","product":"Cameras and Network Video Recorder (NVR)","vulnerabilityName":"Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5735"},{"cveID":"CVE-2019-2215","vendorProject":"Android","product":"Android Kernel","vulnerabilityName":"Android Kernel Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-2215"},{"cveID":"CVE-2020-0041","vendorProject":"Android","product":"Android Kernel","vulnerabilityName":"Android Kernel Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0041"},{"cveID":"CVE-2020-0069","vendorProject":"MediaTek","product":"Multiple Chipsets","vulnerabilityName":"Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0069"},{"cveID":"CVE-2017-9805","vendorProject":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-9805"},{"cveID":"CVE-2021-42013","vendorProject":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42013"},{"cveID":"CVE-2021-41773","vendorProject":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-41773"},{"cveID":"CVE-2019-0211","vendorProject":"Apache","product":"HTTP Server","vulnerabilityName":"Apache HTTP Server Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0211"},{"cveID":"CVE-2016-4437","vendorProject":"Apache","product":"Shiro","vulnerabilityName":"Apache Shiro Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-4437"},{"cveID":"CVE-2019-17558","vendorProject":"Apache","product":"Solr","vulnerabilityName":"Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-17558"},{"cveID":"CVE-2020-17530","vendorProject":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17530"},{"cveID":"CVE-2017-5638","vendorProject":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-5638"},{"cveID":"CVE-2018-11776","vendorProject":"Apache","product":"Struts","vulnerabilityName":"Apache Struts Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-11776"},{"cveID":"CVE-2021-30858","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, macOS Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30858"},{"cveID":"CVE-2019-6223","vendorProject":"Apple","product":"iOS and macOS","vulnerabilityName":"Apple iOS and macOS Group Facetime Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-6223"},{"cveID":"CVE-2021-30860","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Integer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30860"},{"cveID":"CVE-2020-27930","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-27930"},{"cveID":"CVE-2021-30807","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30807"},{"cveID":"CVE-2020-27950","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Memory Initialization Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-27950"},{"cveID":"CVE-2020-27932","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-27932"},{"cveID":"CVE-2020-9818","vendorProject":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-9818"},{"cveID":"CVE-2020-9819","vendorProject":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-9819"},{"cveID":"CVE-2021-30762","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS WebKit Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30762"},{"cveID":"CVE-2021-1782","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Race Condition Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1782"},{"cveID":"CVE-2021-1870","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1870"},{"cveID":"CVE-2021-1871","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1871"},{"cveID":"CVE-2021-1879","vendorProject":"Apple","product":"iOS, iPadOS, and watchOS","vulnerabilityName":"Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1879"},{"cveID":"CVE-2021-30661","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Storage Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30661"},{"cveID":"CVE-2021-30666","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS WebKit Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30666"},{"cveID":"CVE-2021-30713","vendorProject":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30713"},{"cveID":"CVE-2021-30657","vendorProject":"Apple","product":"macOS","vulnerabilityName":"Apple macOS Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30657"},{"cveID":"CVE-2021-30665","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30665"},{"cveID":"CVE-2021-30663","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products WebKit Integer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30663"},{"cveID":"CVE-2021-30761","vendorProject":"Apple","product":"iOS","vulnerabilityName":"Apple iOS WebKit Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30761"},{"cveID":"CVE-2021-30869","vendorProject":"Apple","product":"iOS, iPadOS, and macOS","vulnerabilityName":"Apple iOS, iPadOS, and macOS Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30869"},{"cveID":"CVE-2020-9859","vendorProject":"Apple","product":"Multiple Products","vulnerabilityName":"Apple Multiple Products Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-9859"},{"cveID":"CVE-2021-20090","vendorProject":"Arcadyan","product":"Buffalo Firmware","vulnerabilityName":"Arcadyan Buffalo Firmware Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20090"},{"cveID":"CVE-2021-27562","vendorProject":"Arm","product":"Trusted Firmware","vulnerabilityName":"Arm Trusted Firmware Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27562"},{"cveID":"CVE-2021-28664","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28664"},{"cveID":"CVE-2021-28663","vendorProject":"Arm","product":"Mali Graphics Processing Unit (GPU)","vulnerabilityName":"Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28663"},{"cveID":"CVE-2019-3398","vendorProject":"Atlassian","product":"Confluence Server and Data Center","vulnerabilityName":"Atlassian Confluence Server and Data Center Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-3398"},{"cveID":"CVE-2021-26084","vendorProject":"Atlassian","product":"Confluence Server and Data Center","vulnerabilityName":"Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-26084"},{"cveID":"CVE-2019-11580","vendorProject":"Atlassian","product":"Crowd and Crowd Data Center","vulnerabilityName":"Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11580"},{"cveID":"CVE-2019-3396","vendorProject":"Atlassian","product":"Confluence Server and Data Server","vulnerabilityName":"Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-3396"},{"cveID":"CVE-2021-42258","vendorProject":"BQE","product":"BillQuick Web Suite","vulnerabilityName":"BQE BillQuick Web Suite SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-42258"},{"cveID":"CVE-2020-3452","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Read-Only Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3452"},{"cveID":"CVE-2020-3580","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)","vulnerabilityName":"Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3580"},{"cveID":"CVE-2021-1497","vendorProject":"Cisco","product":"HyperFlex HX","vulnerabilityName":"Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1497"},{"cveID":"CVE-2021-1498","vendorProject":"Cisco","product":"HyperFlex HX","vulnerabilityName":"Cisco HyperFlex HX Data Platform Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1498"},{"cveID":"CVE-2018-0171","vendorProject":"Cisco","product":"IOS and IOS XE","vulnerabilityName":"Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0171"},{"cveID":"CVE-2020-3118","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software Discovery Protocol Format String Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3118"},{"cveID":"CVE-2020-3566","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3566"},{"cveID":"CVE-2020-3569","vendorProject":"Cisco","product":"IOS XR","vulnerabilityName":"Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3569"},{"cveID":"CVE-2020-3161","vendorProject":"Cisco","product":"Cisco IP Phones","vulnerabilityName":"Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3161"},{"cveID":"CVE-2019-1653","vendorProject":"Cisco","product":"Small Business RV320 and RV325 Routers","vulnerabilityName":"Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1653"},{"cveID":"CVE-2018-0296","vendorProject":"Cisco","product":"Adaptive Security Appliance (ASA)","vulnerabilityName":"Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0296"},{"cveID":"CVE-2019-13608","vendorProject":"Citrix","product":"StoreFront Server","vulnerabilityName":"Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-13608"},{"cveID":"CVE-2020-8193","vendorProject":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8193"},{"cveID":"CVE-2020-8195","vendorProject":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8195"},{"cveID":"CVE-2020-8196","vendorProject":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8196"},{"cveID":"CVE-2019-19781","vendorProject":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","vulnerabilityName":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-19781"},{"cveID":"CVE-2019-11634","vendorProject":"Citrix","product":"Workspace Application and Receiver for Windows","vulnerabilityName":"Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11634"},{"cveID":"CVE-2020-29557","vendorProject":"D-Link","product":"DIR-825 R1 Devices","vulnerabilityName":"D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-29557"},{"cveID":"CVE-2020-25506","vendorProject":"D-Link","product":"DNS-320 Device","vulnerabilityName":"D-Link DNS-320 Device Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-25506"},{"cveID":"CVE-2018-15811","vendorProject":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerabilityName":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-15811"},{"cveID":"CVE-2018-18325","vendorProject":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerabilityName":"DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-18325"},{"cveID":"CVE-2017-9822","vendorProject":"DotNetNuke (DNN)","product":"DotNetNuke (DNN)","vulnerabilityName":"DotNetNuke (DNN) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-9822"},{"cveID":"CVE-2019-15752","vendorProject":"Docker","product":"Desktop Community Edition","vulnerabilityName":"Docker Desktop Community Edition Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-15752"},{"cveID":"CVE-2020-8515","vendorProject":"DrayTek","product":"Multiple Vigor Routers","vulnerabilityName":"Multiple DrayTek Vigor Routers Web Management Page Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8515"},{"cveID":"CVE-2018-7600","vendorProject":"Drupal","product":"Drupal Core","vulnerabilityName":"Drupal Core Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-7600"},{"cveID":"CVE-2021-22205","vendorProject":"GitLab","product":"Community and Enterprise Editions","vulnerabilityName":"GitLab Community and Enterprise Editions Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22205"},{"cveID":"CVE-2018-6789","vendorProject":"Exim","product":"Exim","vulnerabilityName":"Exim Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-6789"},{"cveID":"CVE-2020-8657","vendorProject":"EyesOfNetwork","product":"EyesOfNetwork","vulnerabilityName":"EyesOfNetwork Use of Hard-Coded Credentials Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8657"},{"cveID":"CVE-2020-8655","vendorProject":"EyesOfNetwork","product":"EyesOfNetwork","vulnerabilityName":"EyesOfNetwork Improper Privilege Management Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8655"},{"cveID":"CVE-2020-5902","vendorProject":"F5","product":"BIG-IP","vulnerabilityName":"F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5902"},{"cveID":"CVE-2021-22986","vendorProject":"F5","product":"BIG-IP and BIG-IQ Centralized Management","vulnerabilityName":"F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22986"},{"cveID":"CVE-2021-35464","vendorProject":"ForgeRock","product":"Access Management (AM)","vulnerabilityName":"ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35464"},{"cveID":"CVE-2019-5591","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Default Configuration Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5591"},{"cveID":"CVE-2020-12812","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-12812"},{"cveID":"CVE-2018-13379","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13379"},{"cveID":"CVE-2020-16010","vendorProject":"Google","product":"Chrome for Android UI","vulnerabilityName":"Google Chrome for Android UI Heap Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16010"},{"cveID":"CVE-2020-15999","vendorProject":"Google","product":"Chrome FreeType","vulnerabilityName":"Google Chrome FreeType Heap Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-15999"},{"cveID":"CVE-2021-21166","vendorProject":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Race Condition Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21166"},{"cveID":"CVE-2020-16017","vendorProject":"Google","product":"Chrome","vulnerabilityName":"Google Chrome Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16017"},{"cveID":"CVE-2021-37976","vendorProject":"Google","product":"Chromium","vulnerabilityName":"Google Chromium Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-37976"},{"cveID":"CVE-2020-16009","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16009"},{"cveID":"CVE-2021-30632","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Out-of-Bounds Write Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30632"},{"cveID":"CVE-2020-16013","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Incorrect Implementation Vulnerabililty","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16013"},{"cveID":"CVE-2021-30633","vendorProject":"Google","product":"Chromium Indexed DB API","vulnerabilityName":"Google Chromium Indexed DB API Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30633"},{"cveID":"CVE-2021-21148","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Heap Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21148"},{"cveID":"CVE-2021-37973","vendorProject":"Google","product":"Chromium Portals","vulnerabilityName":"Google Chromium Portals Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-37973"},{"cveID":"CVE-2021-30551","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30551"},{"cveID":"CVE-2021-37975","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-37975"},{"cveID":"CVE-2020-6418","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6418"},{"cveID":"CVE-2021-30554","vendorProject":"Google","product":"Chromium WebGL","vulnerabilityName":"Google Chromium WebGL Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30554"},{"cveID":"CVE-2021-21206","vendorProject":"Google","product":"Chromium Blink","vulnerabilityName":"Google Chromium Blink Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21206"},{"cveID":"CVE-2021-38000","vendorProject":"Google","product":"Chromium Intents","vulnerabilityName":"Google Chromium Intents Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38000"},{"cveID":"CVE-2021-38003","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38003"},{"cveID":"CVE-2021-21224","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21224"},{"cveID":"CVE-2021-21193","vendorProject":"Google","product":"Chromium Blink","vulnerabilityName":"Google Chromium Blink Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21193"},{"cveID":"CVE-2021-21220","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21220"},{"cveID":"CVE-2021-30563","vendorProject":"Google","product":"Chromium V8","vulnerabilityName":"Google Chromium V8 Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30563"},{"cveID":"CVE-2020-4430","vendorProject":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4430"},{"cveID":"CVE-2020-4427","vendorProject":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Security Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4427"},{"cveID":"CVE-2020-4428","vendorProject":"IBM","product":"Data Risk Manager","vulnerabilityName":"IBM Data Risk Manager Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4428"},{"cveID":"CVE-2019-4716","vendorProject":"IBM","product":"Planning Analytics","vulnerabilityName":"IBM Planning Analytics Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-4716"},{"cveID":"CVE-2016-3715","vendorProject":"ImageMagick","product":"ImageMagick","vulnerabilityName":"ImageMagick Arbitrary File Deletion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3715"},{"cveID":"CVE-2016-3718","vendorProject":"ImageMagick","product":"ImageMagick","vulnerabilityName":"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3718"},{"cveID":"CVE-2020-15505","vendorProject":"Ivanti","product":"MobileIron Multiple Products","vulnerabilityName":"Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-15505"},{"cveID":"CVE-2021-30116","vendorProject":"Kaseya","product":"Virtual System/Server Administrator (VSA)","vulnerabilityName":"Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-30116"},{"cveID":"CVE-2020-7961","vendorProject":"Liferay","product":"Liferay Portal","vulnerabilityName":"Liferay Portal Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-7961"},{"cveID":"CVE-2021-23874","vendorProject":"McAfee","product":"McAfee Total Protection (MTP)","vulnerabilityName":"McAfee Total Protection (MTP) Improper Privilege Management Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-23874"},{"cveID":"CVE-2021-22506","vendorProject":"Micro Focus","product":"Micro Focus Access Manager","vulnerabilityName":"Micro Focus Access Manager Information Leakage Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22506"},{"cveID":"CVE-2021-22502","vendorProject":"Micro Focus","product":"Operation Bridge Reporter (OBR)","vulnerabilityName":"Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22502"},{"cveID":"CVE-2014-1812","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2014-1812"},{"cveID":"CVE-2021-38647","vendorProject":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38647"},{"cveID":"CVE-2016-0167","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0167"},{"cveID":"CVE-2020-0878","vendorProject":"Microsoft","product":"Edge and Internet Explorer","vulnerabilityName":"Microsoft Edge and Internet Explorer Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0878"},{"cveID":"CVE-2021-31955","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31955"},{"cveID":"CVE-2021-1647","vendorProject":"Microsoft","product":"Defender","vulnerabilityName":"Microsoft Defender Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1647"},{"cveID":"CVE-2021-33739","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33739"},{"cveID":"CVE-2016-0185","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Media Center Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-0185"},{"cveID":"CVE-2020-0683","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Installer Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0683"},{"cveID":"CVE-2020-17087","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17087"},{"cveID":"CVE-2021-33742","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33742"},{"cveID":"CVE-2021-31199","vendorProject":"Microsoft","product":"Enhanced Cryptographic Provider","vulnerabilityName":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31199"},{"cveID":"CVE-2021-33771","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33771"},{"cveID":"CVE-2021-31956","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows NTFS Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31956"},{"cveID":"CVE-2021-31201","vendorProject":"Microsoft","product":"Enhanced Cryptographic Provider","vulnerabilityName":"Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31201"},{"cveID":"CVE-2021-31979","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31979"},{"cveID":"CVE-2020-0938","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0938"},{"cveID":"CVE-2020-17144","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17144"},{"cveID":"CVE-2020-0986","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Kernel Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0986"},{"cveID":"CVE-2020-1020","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1020"},{"cveID":"CVE-2021-38645","vendorProject":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38645"},{"cveID":"CVE-2021-34523","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34523"},{"cveID":"CVE-2017-7269","vendorProject":"Microsoft","product":"Internet Information Services (IIS)","vulnerabilityName":"Microsoft Windows Server Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-7269"},{"cveID":"CVE-2021-36948","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Update Medic Service Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-36948"},{"cveID":"CVE-2021-38649","vendorProject":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38649"},{"cveID":"CVE-2020-0688","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0688"},{"cveID":"CVE-2017-0143","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0143"},{"cveID":"CVE-2016-7255","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-7255"},{"cveID":"CVE-2019-0708","vendorProject":"Microsoft","product":"Remote Desktop Services","vulnerabilityName":"Microsoft Remote Desktop Services Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0708"},{"cveID":"CVE-2021-34473","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34473"},{"cveID":"CVE-2020-1464","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Spoofing Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1464"},{"cveID":"CVE-2021-1732","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1732"},{"cveID":"CVE-2021-34527","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-04 (https://www.cisa.gov/news-events/directives/ed-21-04-mitigate-windows-print-spooler-service-vulnerability) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-04. https://nvd.nist.gov/vuln/detail/CVE-2021-34527"},{"cveID":"CVE-2021-31207","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Security Feature Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31207"},{"cveID":"CVE-2019-0803","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0803"},{"cveID":"CVE-2020-1040","vendorProject":"Microsoft","product":"Hyper-V RemoteFX","vulnerabilityName":"Microsoft Hyper-V RemoteFX vGPU Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1040"},{"cveID":"CVE-2021-28310","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-28310"},{"cveID":"CVE-2020-1350","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows DNS Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 20-03 (https://www.cisa.gov/news-events/directives/ed-20-03-mitigate-windows-dns-server-remote-code-execution-vulnerability-july-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-03. https://nvd.nist.gov/vuln/detail/CVE-2020-1350"},{"cveID":"CVE-2021-26411","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-26411"},{"cveID":"CVE-2019-0859","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0859"},{"cveID":"CVE-2021-40444","vendorProject":"Microsoft","product":"MSHTML","vulnerabilityName":"Microsoft MSHTML Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40444"},{"cveID":"CVE-2017-8759","vendorProject":"Microsoft","product":".NET Framework","vulnerabilityName":"Microsoft .NET Framework Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-8759"},{"cveID":"CVE-2018-8653","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8653"},{"cveID":"CVE-2019-0797","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0797"},{"cveID":"CVE-2021-36942","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-36942"},{"cveID":"CVE-2019-1215","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1215"},{"cveID":"CVE-2018-0798","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0798"},{"cveID":"CVE-2018-0802","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0802"},{"cveID":"CVE-2012-0158","vendorProject":"Microsoft","product":"MSCOMCTL.OCX","vulnerabilityName":"Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-0158"},{"cveID":"CVE-2015-1641","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-1641"},{"cveID":"CVE-2021-27085","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27085"},{"cveID":"CVE-2019-0541","vendorProject":"Microsoft","product":"MSHTML","vulnerabilityName":"Microsoft MSHTML Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0541"},{"cveID":"CVE-2017-11882","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11882"},{"cveID":"CVE-2020-0674","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0674"},{"cveID":"CVE-2021-27059","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27059"},{"cveID":"CVE-2019-1367","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1367"},{"cveID":"CVE-2017-0199","vendorProject":"Microsoft","product":"Office and WordPad","vulnerabilityName":"Microsoft Office and WordPad Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-0199"},{"cveID":"CVE-2020-1380","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1380"},{"cveID":"CVE-2019-1429","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1429"},{"cveID":"CVE-2017-11774","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office Outlook Security Feature Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-11774"},{"cveID":"CVE-2020-0968","vendorProject":"Microsoft","product":"Internet Explorer","vulnerabilityName":"Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0968"},{"cveID":"CVE-2020-1472","vendorProject":"Microsoft","product":"Netlogon","vulnerabilityName":"Microsoft Netlogon Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 20-04 (https://www.cisa.gov/news-events/directives/ed-20-04-mitigate-netlogon-elevation-privilege-vulnerability-august-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-04. https://nvd.nist.gov/vuln/detail/CVE-2020-1472"},{"cveID":"CVE-2021-26855","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26855"},{"cveID":"CVE-2021-26858","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26858"},{"cveID":"CVE-2021-27065","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-27065"},{"cveID":"CVE-2020-1054","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1054"},{"cveID":"CVE-2021-1675","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Print Spooler Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1675"},{"cveID":"CVE-2021-34448","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Scripting Engine Memory Corruption Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34448"},{"cveID":"CVE-2020-0601","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows CryptoAPI Spoofing Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 20-02 (https://www.cisa.gov/news-events/directives/ed-20-02-mitigate-windows-vulnerabilities-january-2020-patch-tuesday) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 20-02. https://nvd.nist.gov/vuln/detail/CVE-2020-0601"},{"cveID":"CVE-2019-0604","vendorProject":"Microsoft","product":"SharePoint","vulnerabilityName":"Microsoft SharePoint Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0604"},{"cveID":"CVE-2020-0646","vendorProject":"Microsoft","product":".NET Framework","vulnerabilityName":"Microsoft .NET Framework Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0646"},{"cveID":"CVE-2019-0808","vendorProject":"Microsoft","product":"Win32k","vulnerabilityName":"Microsoft Win32k Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0808"},{"cveID":"CVE-2021-26857","vendorProject":"Microsoft","product":"Exchange Server","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26857"},{"cveID":"CVE-2020-1147","vendorProject":"Microsoft","product":".NET Framework, SharePoint, Visual Studio","vulnerabilityName":"Microsoft .NET Framework, SharePoint, and Visual Studio Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-1147"},{"cveID":"CVE-2019-1214","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Privilege Common Log File System (CLFS) Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-1214"},{"cveID":"CVE-2016-3235","vendorProject":"Microsoft","product":"Office","vulnerabilityName":"Microsoft Office OLE DLL Side Loading Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3235"},{"cveID":"CVE-2019-0863","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Error Reporting (WER) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-0863"},{"cveID":"CVE-2021-36955","vendorProject":"Microsoft","product":"Windows","vulnerabilityName":"Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-36955"},{"cveID":"CVE-2021-38648","vendorProject":"Microsoft","product":"Open Management Infrastructure (OMI)","vulnerabilityName":"Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-38648"},{"cveID":"CVE-2020-6819","vendorProject":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6819"},{"cveID":"CVE-2020-6820","vendorProject":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6820"},{"cveID":"CVE-2019-17026","vendorProject":"Mozilla","product":"Firefox and Thunderbird","vulnerabilityName":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-17026"},{"cveID":"CVE-2019-15949","vendorProject":"Nagios","product":"Nagios XI","vulnerabilityName":"Nagios XI Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-15949"},{"cveID":"CVE-2020-26919","vendorProject":"NETGEAR","product":"JGS516PE Devices","vulnerabilityName":"Netgear JGS516PE Devices Missing Function Level Access Control Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-26919"},{"cveID":"CVE-2019-19356","vendorProject":"Netis","product":"WF2419 Devices","vulnerabilityName":"Netis WF2419 Devices Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-19356"},{"cveID":"CVE-2020-2555","vendorProject":"Oracle","product":"Multiple Products","vulnerabilityName":"Oracle Multiple Products Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-2555"},{"cveID":"CVE-2012-3152","vendorProject":"Oracle","product":"Fusion Middleware","vulnerabilityName":"Oracle Fusion Middleware Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2012-3152"},{"cveID":"CVE-2020-14871","vendorProject":"Oracle","product":"Solaris and Zettabyte File System (ZFS)","vulnerabilityName":"Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14871"},{"cveID":"CVE-2015-4852","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2015-4852"},{"cveID":"CVE-2020-14750","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14750"},{"cveID":"CVE-2020-14882","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14882"},{"cveID":"CVE-2020-14883","vendorProject":"Oracle","product":"WebLogic Server","vulnerabilityName":"Oracle WebLogic Server Unspecified Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-14883"},{"cveID":"CVE-2020-8644","vendorProject":"PlaySMS","product":"PlaySMS","vulnerabilityName":"PlaySMS Server-Side Template Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8644"},{"cveID":"CVE-2019-18935","vendorProject":"Progress","product":"Telerik UI for ASP.NET AJAX","vulnerabilityName":"Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-18935"},{"cveID":"CVE-2021-22893","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22893"},{"cveID":"CVE-2020-8243","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2020-8243"},{"cveID":"CVE-2021-22900","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Unrestricted File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22900"},{"cveID":"CVE-2021-22894","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22894"},{"cveID":"CVE-2020-8260","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2020-8260"},{"cveID":"CVE-2021-22899","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2021-22899"},{"cveID":"CVE-2019-11510","vendorProject":"Ivanti","product":"Pulse Connect Secure","vulnerabilityName":"Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"Reference CISA's ED 21-03 (https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-03. https://nvd.nist.gov/vuln/detail/CVE-2019-11510"},{"cveID":"CVE-2019-11539","vendorProject":"Ivanti","product":"Pulse Connect Secure and Pulse Policy Secure","vulnerabilityName":"Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11539"},{"cveID":"CVE-2021-1906","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Detection of Error Condition Without Action Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1906"},{"cveID":"CVE-2021-1905","vendorProject":"Qualcomm","product":"Multiple Chipsets","vulnerabilityName":"Qualcomm Multiple Chipsets Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-1905"},{"cveID":"CVE-2020-10221","vendorProject":"rConfig","product":"rConfig","vulnerabilityName":"rConfig OS Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10221"},{"cveID":"CVE-2021-35395","vendorProject":"Realtek","product":"AP-Router SDK","vulnerabilityName":"Realtek AP-Router SDK Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35395"},{"cveID":"CVE-2017-16651","vendorProject":"Roundcube","product":"Roundcube Webmail","vulnerabilityName":"Roundcube Webmail File Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-16651"},{"cveID":"CVE-2020-11652","vendorProject":"SaltStack","product":"Salt","vulnerabilityName":"SaltStack Salt Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-11652"},{"cveID":"CVE-2020-11651","vendorProject":"SaltStack","product":"Salt","vulnerabilityName":"SaltStack Salt Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-11651"},{"cveID":"CVE-2020-16846","vendorProject":"SaltStack","product":"Salt","vulnerabilityName":"SaltStack Salt Shell Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-16846"},{"cveID":"CVE-2018-2380","vendorProject":"SAP","product":"Customer Relationship Management (CRM)","vulnerabilityName":"SAP Customer Relationship Management (CRM) Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-2380"},{"cveID":"CVE-2010-5326","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-5326"},{"cveID":"CVE-2016-9563","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver XML External Entity (XXE) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-9563"},{"cveID":"CVE-2020-6287","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Missing Authentication for Critical Function Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6287"},{"cveID":"CVE-2020-6207","vendorProject":"SAP","product":"Solution Manager","vulnerabilityName":"SAP Solution Manager Missing Authentication for Critical Function Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6207"},{"cveID":"CVE-2016-3976","vendorProject":"SAP","product":"NetWeaver","vulnerabilityName":"SAP NetWeaver Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3976"},{"cveID":"CVE-2019-16256","vendorProject":"SIMalliance","product":"Toolbox Browser","vulnerabilityName":"SIMalliance Toolbox Browser Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-16256"},{"cveID":"CVE-2020-10148","vendorProject":"SolarWinds","product":"Orion","vulnerabilityName":"SolarWinds Orion Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10148"},{"cveID":"CVE-2021-35211","vendorProject":"SolarWinds","product":"Serv-U","vulnerabilityName":"SolarWinds Serv-U Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-35211"},{"cveID":"CVE-2016-3643","vendorProject":"SolarWinds","product":"Virtualization Manager","vulnerabilityName":"SolarWinds Virtualization Manager Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2016-3643"},{"cveID":"CVE-2020-10199","vendorProject":"Sonatype","product":"Nexus Repository","vulnerabilityName":"Sonatype Nexus Repository Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10199"},{"cveID":"CVE-2021-20021","vendorProject":"SonicWall","product":"SonicWall Email Security","vulnerabilityName":"SonicWall Email Security Improper Privilege Management Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20021"},{"cveID":"CVE-2019-7481","vendorProject":"SonicWall","product":"SMA100","vulnerabilityName":"SonicWall SMA100 SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-7481"},{"cveID":"CVE-2021-20022","vendorProject":"SonicWall","product":"SonicWall Email Security","vulnerabilityName":"SonicWall Email Security Unrestricted Upload of File Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20022"},{"cveID":"CVE-2021-20023","vendorProject":"SonicWall","product":"SonicWall Email Security","vulnerabilityName":"SonicWall Email Security Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20023"},{"cveID":"CVE-2021-20016","vendorProject":"SonicWall","product":"SSLVPN SMA100","vulnerabilityName":"SonicWall SSLVPN SMA100 SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-20016"},{"cveID":"CVE-2020-12271","vendorProject":"Sophos","product":"SFOS","vulnerabilityName":"Sophos SFOS SQL Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-12271"},{"cveID":"CVE-2020-10181","vendorProject":"Sumavision","product":"Enhanced Multimedia Router (EMR)","vulnerabilityName":"Sumavision EMR Cross-Site Request Forgery (CSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10181"},{"cveID":"CVE-2017-6327","vendorProject":"Symantec","product":"Symantec Messaging Gateway","vulnerabilityName":"Symantec Messaging Gateway Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-6327"},{"cveID":"CVE-2019-18988","vendorProject":"TeamViewer","product":"Desktop","vulnerabilityName":"TeamViewer Desktop Bypass Remote Login Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-18988"},{"cveID":"CVE-2017-9248","vendorProject":"Progress","product":"ASP.NET AJAX and Sitefinity","vulnerabilityName":"Progress Telerik UI for ASP.NET AJAX and Sitefinity Cryptographic Weakness Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2017-9248"},{"cveID":"CVE-2021-31755","vendorProject":"Tenda","product":"AC11 Router","vulnerabilityName":"Tenda AC11 Router Stack Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31755"},{"cveID":"CVE-2020-10987","vendorProject":"Tenda","product":"AC1900 Router AC15 Model","vulnerabilityName":"Tenda AC1900 Router AC15 Model Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10987"},{"cveID":"CVE-2018-14558","vendorProject":"Tenda","product":"AC7, AC9, and AC10 Routers","vulnerabilityName":"Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-14558"},{"cveID":"CVE-2018-20062","vendorProject":"ThinkPHP","product":"noneCms","vulnerabilityName":"ThinkPHP \"noneCms\" Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-20062"},{"cveID":"CVE-2019-9082","vendorProject":"ThinkPHP","product":"ThinkPHP","vulnerabilityName":"ThinkPHP Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-9082"},{"cveID":"CVE-2019-18187","vendorProject":"Trend Micro","product":"OfficeScan","vulnerabilityName":"Trend Micro OfficeScan Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-18187"},{"cveID":"CVE-2020-8467","vendorProject":"Trend Micro","product":"Apex One and OfficeScan","vulnerabilityName":"Trend Micro Apex One and OfficeScan Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8467"},{"cveID":"CVE-2020-8468","vendorProject":"Trend Micro","product":"Apex One, OfficeScan and Worry-Free Business Security Agents","vulnerabilityName":"Trend Micro Multiple Products Content Validation Escape Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8468"},{"cveID":"CVE-2020-24557","vendorProject":"Trend Micro","product":"Apex One, OfficeScan, and Worry-Free Business Security","vulnerabilityName":"Trend Micro Multiple Products Improper Access Control Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-24557"},{"cveID":"CVE-2020-8599","vendorProject":"Trend Micro","product":"Apex One and OfficeScan","vulnerabilityName":"Trend Micro Apex One and OfficeScan Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-8599"},{"cveID":"CVE-2021-36742","vendorProject":"Trend Micro","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","vulnerabilityName":"Trend Micro Multiple Products Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://success.trendmicro.com/dcx/s/solution/000287819?language=en_US, https://success.trendmicro.com/dcx/s/solution/000287820?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-36742"},{"cveID":"CVE-2021-36741","vendorProject":"Trend Micro","product":"Apex One, Apex One as a Service, and Worry-Free Business Security","vulnerabilityName":"Trend Micro Multiple Products Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://success.trendmicro.com/dcx/s/solution/000287819?language=en_US, https://success.trendmicro.com/dcx/s/solution/000287820?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-36741"},{"cveID":"CVE-2019-20085","vendorProject":"TVT","product":"NVMS-1000","vulnerabilityName":"TVT NVMS-1000 Directory Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-20085"},{"cveID":"CVE-2020-5849","vendorProject":"Unraid","product":"Unraid","vulnerabilityName":"Unraid Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5849"},{"cveID":"CVE-2020-5847","vendorProject":"Unraid","product":"Unraid","vulnerabilityName":"Unraid Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-5847"},{"cveID":"CVE-2019-16759","vendorProject":"vBulletin","product":"vBulletin","vulnerabilityName":"vBulletin PHP Module Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-16759"},{"cveID":"CVE-2020-17496","vendorProject":"vBulletin","product":"vBulletin","vulnerabilityName":"vBulletin PHP Module Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17496"},{"cveID":"CVE-2019-5544","vendorProject":"VMware","product":"VMware ESXi and Horizon DaaS","vulnerabilityName":"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5544"},{"cveID":"CVE-2020-3992","vendorProject":"VMware","product":"ESXi","vulnerabilityName":"VMware ESXi OpenSLP Use-After-Free Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3992"},{"cveID":"CVE-2020-3950","vendorProject":"VMware","product":"Multiple Products","vulnerabilityName":"VMware Multiple Products Privilege Escalation Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3950"},{"cveID":"CVE-2021-22005","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-22005"},{"cveID":"CVE-2020-3952","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Information Disclosure Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-3952"},{"cveID":"CVE-2021-21972","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21972"},{"cveID":"CVE-2021-21985","vendorProject":"VMware","product":"vCenter Server","vulnerabilityName":"VMware vCenter Server Improper Input Validation Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-21985"},{"cveID":"CVE-2020-4006","vendorProject":"VMware","product":"Multiple Products","vulnerabilityName":"Multiple VMware Products Command Injection Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-4006"},{"cveID":"CVE-2020-25213","vendorProject":"WordPress","product":"File Manager Plugin","vulnerabilityName":"WordPress File Manager Plugin Remote Code Execution Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-25213"},{"cveID":"CVE-2020-11738","vendorProject":"WordPress","product":"Snap Creek Duplicator Plugin","vulnerabilityName":"WordPress Snap Creek Duplicator Plugin File Download Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-11738"},{"cveID":"CVE-2019-9978","vendorProject":"WordPress","product":"Social Warfare Plugin","vulnerabilityName":"WordPress Social Warfare Plugin Cross-Site Scripting (XSS) Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-9978"},{"cveID":"CVE-2021-27561","vendorProject":"Yealink","product":"Device Management","vulnerabilityName":"Yealink Device Management Server-Side Request Forgery (SSRF) Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-27561"},{"cveID":"CVE-2021-40539","vendorProject":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability","dateAdded":"2021-11-03","dueDate":"2021-11-17","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-40539"},{"cveID":"CVE-2020-10189","vendorProject":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine Desktop Central File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-10189"},{"cveID":"CVE-2019-8394","vendorProject":"Zoho","product":"ManageEngine","vulnerabilityName":"Zoho ManageEngine ServiceDesk Plus (SDP) File Upload Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-8394"},{"cveID":"CVE-2020-29583","vendorProject":"Zyxel","product":"Multiple Products","vulnerabilityName":"Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-29583"}]},"epss":{"modelVersion":"v2026.06.15","scoreDate":"2026-10-31T12:00:27Z","sourceRecordCount":398713,"records":[{"cve":"CVE-2002-0367","epss":"0.04919","percentile":"0.92117","date":"2026-10-31"},{"cve":"CVE-2004-0210","epss":"0.07214","percentile":"0.94317","date":"2026-10-31"},{"cve":"CVE-2004-1464","epss":"0.0484","percentile":"0.92008","date":"2026-10-31"},{"cve":"CVE-2005-2773","epss":"0.74592","percentile":"0.99498","date":"2026-10-31"},{"cve":"CVE-2006-1547","epss":"0.54635","percentile":"0.99019","date":"2026-10-31"},{"cve":"CVE-2006-2492","epss":"0.48107","percentile":"0.98858","date":"2026-10-31"},{"cve":"CVE-2007-0671","epss":"0.43241","percentile":"0.98726","date":"2026-10-31"},{"cve":"CVE-2007-3010","epss":"0.97385","percentile":"0.99898","date":"2026-10-31"},{"cve":"CVE-2007-5659","epss":"0.87423","percentile":"0.99756","date":"2026-10-31"},{"cve":"CVE-2008-0015","epss":"0.76576","percentile":"0.99543","date":"2026-10-31"},{"cve":"CVE-2008-0655","epss":"0.37871","percentile":"0.98547","date":"2026-10-31"},{"cve":"CVE-2008-2992","epss":"0.99793","percentile":"0.99957","date":"2026-10-31"},{"cve":"CVE-2008-3431","epss":"0.06876","percentile":"0.94061","date":"2026-10-31"},{"cve":"CVE-2008-4128","epss":"0.33871","percentile":"0.9839","date":"2026-10-31"},{"cve":"CVE-2008-4250","epss":"0.98751","percentile":"0.99926","date":"2026-10-31"},{"cve":"CVE-2009-0238","epss":"0.42941","percentile":"0.9872","date":"2026-10-31"},{"cve":"CVE-2009-0556","epss":"0.67312","percentile":"0.99304","date":"2026-10-31"},{"cve":"CVE-2009-0557","epss":"0.52845","percentile":"0.98973","date":"2026-10-31"},{"cve":"CVE-2009-0563","epss":"0.59634","percentile":"0.99126","date":"2026-10-31"},{"cve":"CVE-2009-0927","epss":"0.96632","percentile":"0.99883","date":"2026-10-31"},{"cve":"CVE-2009-1123","epss":"0.04878","percentile":"0.92061","date":"2026-10-31"},{"cve":"CVE-2009-1151","epss":"0.96565","percentile":"0.99882","date":"2026-10-31"},{"cve":"CVE-2009-1537","epss":"0.51362","percentile":"0.98939","date":"2026-10-31"},{"cve":"CVE-2009-1862","epss":"0.21198","percentile":"0.97588","date":"2026-10-31"},{"cve":"CVE-2009-2055","epss":"0.03314","percentile":"0.8857","date":"2026-10-31"},{"cve":"CVE-2009-3129","epss":"0.84034","percentile":"0.99693","date":"2026-10-31"},{"cve":"CVE-2009-3459","epss":"0.86646","percentile":"0.9974","date":"2026-10-31"},{"cve":"CVE-2009-3953","epss":"0.83219","percentile":"0.99678","date":"2026-10-31"},{"cve":"CVE-2009-3960","epss":"0.90118","percentile":"0.99795","date":"2026-10-31"},{"cve":"CVE-2009-4324","epss":"0.8188","percentile":"0.99649","date":"2026-10-31"},{"cve":"CVE-2010-0188","epss":"0.88246","percentile":"0.99768","date":"2026-10-31"},{"cve":"CVE-2010-0232","epss":"0.28735","percentile":"0.98141","date":"2026-10-31"},{"cve":"CVE-2010-0249","epss":"0.91939","percentile":"0.99818","date":"2026-10-31"},{"cve":"CVE-2010-0738","epss":"0.73815","percentile":"0.99476","date":"2026-10-31"},{"cve":"CVE-2010-0806","epss":"0.82241","percentile":"0.99657","date":"2026-10-31"},{"cve":"CVE-2010-0840","epss":"0.96319","percentile":"0.99879","date":"2026-10-31"},{"cve":"CVE-2010-1297","epss":"0.82531","percentile":"0.99665","date":"2026-10-31"},{"cve":"CVE-2010-1428","epss":"0.52654","percentile":"0.98969","date":"2026-10-31"},{"cve":"CVE-2010-1871","epss":"0.83397","percentile":"0.99682","date":"2026-10-31"},{"cve":"CVE-2010-2568","epss":"0.89623","percentile":"0.99787","date":"2026-10-31"},{"cve":"CVE-2010-2572","epss":"0.58646","percentile":"0.99102","date":"2026-10-31"},{"cve":"CVE-2010-2861","epss":"0.99747","percentile":"0.99954","date":"2026-10-31"},{"cve":"CVE-2010-2883","epss":"0.81376","percentile":"0.99638","date":"2026-10-31"},{"cve":"CVE-2010-3035","epss":"0.05668","percentile":"0.92982","date":"2026-10-31"},{"cve":"CVE-2010-3333","epss":"0.89389","percentile":"0.99784","date":"2026-10-31"},{"cve":"CVE-2010-3765","epss":"0.83156","percentile":"0.99676","date":"2026-10-31"},{"cve":"CVE-2010-3904","epss":"0.15861","percentile":"0.96884","date":"2026-10-31"},{"cve":"CVE-2010-3962","epss":"0.96831","percentile":"0.99887","date":"2026-10-31"},{"cve":"CVE-2010-4344","epss":"0.71706","percentile":"0.99422","date":"2026-10-31"},{"cve":"CVE-2010-4345","epss":"0.17965","percentile":"0.97186","date":"2026-10-31"},{"cve":"CVE-2010-4398","epss":"0.08661","percentile":"0.95116","date":"2026-10-31"},{"cve":"CVE-2010-5326","epss":"0.1777","percentile":"0.97164","date":"2026-10-31"},{"cve":"CVE-2010-5330","epss":"0.40232","percentile":"0.98639","date":"2026-10-31"},{"cve":"CVE-2011-0609","epss":"0.63507","percentile":"0.99211","date":"2026-10-31"},{"cve":"CVE-2011-0611","epss":"0.9941","percentile":"0.99941","date":"2026-10-31"},{"cve":"CVE-2011-1823","epss":"0.41367","percentile":"0.98671","date":"2026-10-31"},{"cve":"CVE-2011-1889","epss":"0.4902","percentile":"0.98881","date":"2026-10-31"},{"cve":"CVE-2011-2005","epss":"0.31761","percentile":"0.98299","date":"2026-10-31"},{"cve":"CVE-2011-2462","epss":"0.88581","percentile":"0.99773","date":"2026-10-31"},{"cve":"CVE-2011-3402","epss":"0.78138","percentile":"0.99577","date":"2026-10-31"},{"cve":"CVE-2011-3544","epss":"0.96653","percentile":"0.99884","date":"2026-10-31"},{"cve":"CVE-2011-4723","epss":"0.03064","percentile":"0.87623","date":"2026-10-31"},{"cve":"CVE-2012-0151","epss":"0.87658","percentile":"0.99759","date":"2026-10-31"},{"cve":"CVE-2012-0158","epss":"0.99976","percentile":"0.99979","date":"2026-10-31"},{"cve":"CVE-2012-0391","epss":"0.75599","percentile":"0.99519","date":"2026-10-31"},{"cve":"CVE-2012-0507","epss":"0.98189","percentile":"0.99914","date":"2026-10-31"},{"cve":"CVE-2012-0518","epss":"0.04685","percentile":"0.91785","date":"2026-10-31"},{"cve":"CVE-2012-0754","epss":"0.91085","percentile":"0.99808","date":"2026-10-31"},{"cve":"CVE-2012-0767","epss":"0.06187","percentile":"0.93501","date":"2026-10-31"},{"cve":"CVE-2012-1535","epss":"0.70384","percentile":"0.99386","date":"2026-10-31"},{"cve":"CVE-2012-1710","epss":"0.07826","percentile":"0.94674","date":"2026-10-31"},{"cve":"CVE-2012-1723","epss":"0.93566","percentile":"0.99841","date":"2026-10-31"},{"cve":"CVE-2012-1823","epss":"0.99998","percentile":"0.9999","date":"2026-10-31"},{"cve":"CVE-2012-1854","epss":"0.20867","percentile":"0.9755","date":"2026-10-31"},{"cve":"CVE-2012-1856","epss":"0.72032","percentile":"0.9943","date":"2026-10-31"},{"cve":"CVE-2012-1889","epss":"0.83516","percentile":"0.99684","date":"2026-10-31"},{"cve":"CVE-2012-2034","epss":"0.07713","percentile":"0.94613","date":"2026-10-31"},{"cve":"CVE-2012-2539","epss":"0.53033","percentile":"0.98978","date":"2026-10-31"},{"cve":"CVE-2012-3152","epss":"0.98793","percentile":"0.99926","date":"2026-10-31"},{"cve":"CVE-2012-4681","epss":"0.98536","percentile":"0.99921","date":"2026-10-31"},{"cve":"CVE-2012-4792","epss":"0.78823","percentile":"0.99591","date":"2026-10-31"},{"cve":"CVE-2012-4969","epss":"0.8025","percentile":"0.99619","date":"2026-10-31"},{"cve":"CVE-2012-5054","epss":"0.21194","percentile":"0.97587","date":"2026-10-31"},{"cve":"CVE-2012-5076","epss":"0.9125","percentile":"0.9981","date":"2026-10-31"},{"cve":"CVE-2013-0074","epss":"0.78885","percentile":"0.99592","date":"2026-10-31"},{"cve":"CVE-2013-0422","epss":"0.97024","percentile":"0.9989","date":"2026-10-31"},{"cve":"CVE-2013-0431","epss":"0.9015","percentile":"0.99796","date":"2026-10-31"},{"cve":"CVE-2013-0625","epss":"0.93758","percentile":"0.99843","date":"2026-10-31"},{"cve":"CVE-2013-0629","epss":"0.65795","percentile":"0.99267","date":"2026-10-31"},{"cve":"CVE-2013-0631","epss":"0.66413","percentile":"0.99282","date":"2026-10-31"},{"cve":"CVE-2013-0632","epss":"0.93076","percentile":"0.99833","date":"2026-10-31"},{"cve":"CVE-2013-0640","epss":"0.86927","percentile":"0.99746","date":"2026-10-31"},{"cve":"CVE-2013-0641","epss":"0.32346","percentile":"0.98326","date":"2026-10-31"},{"cve":"CVE-2013-0643","epss":"0.10533","percentile":"0.9577","date":"2026-10-31"},{"cve":"CVE-2013-0648","epss":"0.11094","percentile":"0.95925","date":"2026-10-31"},{"cve":"CVE-2013-1331","epss":"0.79822","percentile":"0.99609","date":"2026-10-31"},{"cve":"CVE-2013-1347","epss":"0.7774","percentile":"0.99568","date":"2026-10-31"},{"cve":"CVE-2013-1675","epss":"0.06696","percentile":"0.93911","date":"2026-10-31"},{"cve":"CVE-2013-1690","epss":"0.69021","percentile":"0.99352","date":"2026-10-31"},{"cve":"CVE-2013-2094","epss":"0.47709","percentile":"0.98849","date":"2026-10-31"},{"cve":"CVE-2013-2251","epss":"0.99998","percentile":"0.9999","date":"2026-10-31"},{"cve":"CVE-2013-2423","epss":"0.85215","percentile":"0.99715","date":"2026-10-31"},{"cve":"CVE-2013-2465","epss":"0.98773","percentile":"0.99926","date":"2026-10-31"},{"cve":"CVE-2013-2551","epss":"0.73918","percentile":"0.99479","date":"2026-10-31"},{"cve":"CVE-2013-2596","epss":"0.03212","percentile":"0.88183","date":"2026-10-31"},{"cve":"CVE-2013-2597","epss":"0.01503","percentile":"0.74324","date":"2026-10-31"},{"cve":"CVE-2013-2729","epss":"0.66555","percentile":"0.99285","date":"2026-10-31"},{"cve":"CVE-2013-3163","epss":"0.70676","percentile":"0.99394","date":"2026-10-31"},{"cve":"CVE-2013-3346","epss":"0.78913","percentile":"0.99593","date":"2026-10-31"},{"cve":"CVE-2013-3660","epss":"0.39318","percentile":"0.98605","date":"2026-10-31"},{"cve":"CVE-2013-3893","epss":"0.87639","percentile":"0.99759","date":"2026-10-31"},{"cve":"CVE-2013-3896","epss":"0.67959","percentile":"0.99322","date":"2026-10-31"},{"cve":"CVE-2013-3897","epss":"0.7731","percentile":"0.99556","date":"2026-10-31"},{"cve":"CVE-2013-3900","epss":"0.44647","percentile":"0.9877","date":"2026-10-31"},{"cve":"CVE-2013-3906","epss":"0.84853","percentile":"0.9971","date":"2026-10-31"},{"cve":"CVE-2013-3918","epss":"0.73693","percentile":"0.99473","date":"2026-10-31"},{"cve":"CVE-2013-3993","epss":"0.04766","percentile":"0.91904","date":"2026-10-31"},{"cve":"CVE-2013-4810","epss":"0.79468","percentile":"0.99602","date":"2026-10-31"},{"cve":"CVE-2013-5065","epss":"0.34651","percentile":"0.98421","date":"2026-10-31"},{"cve":"CVE-2013-5223","epss":"0.50833","percentile":"0.98924","date":"2026-10-31"},{"cve":"CVE-2013-6282","epss":"0.39711","percentile":"0.98621","date":"2026-10-31"},{"cve":"CVE-2013-7331","epss":"0.5021","percentile":"0.98906","date":"2026-10-31"},{"cve":"CVE-2014-0130","epss":"0.53703","percentile":"0.98997","date":"2026-10-31"},{"cve":"CVE-2014-0160","epss":"0.99999","percentile":"0.99996","date":"2026-10-31"},{"cve":"CVE-2014-0196","epss":"0.20329","percentile":"0.9748","date":"2026-10-31"},{"cve":"CVE-2014-0322","epss":"0.85122","percentile":"0.99714","date":"2026-10-31"},{"cve":"CVE-2014-0496","epss":"0.3998","percentile":"0.98629","date":"2026-10-31"},{"cve":"CVE-2014-0497","epss":"0.99879","percentile":"0.99965","date":"2026-10-31"},{"cve":"CVE-2014-0502","epss":"0.24817","percentile":"0.97904","date":"2026-10-31"},{"cve":"CVE-2014-0546","epss":"0.2233","percentile":"0.97687","date":"2026-10-31"},{"cve":"CVE-2014-0780","epss":"0.74679","percentile":"0.99502","date":"2026-10-31"},{"cve":"CVE-2014-100005","epss":"0.43456","percentile":"0.98738","date":"2026-10-31"},{"cve":"CVE-2014-1761","epss":"0.77734","percentile":"0.99568","date":"2026-10-31"},{"cve":"CVE-2014-1776","epss":"0.82682","percentile":"0.99667","date":"2026-10-31"},{"cve":"CVE-2014-1812","epss":"0.65117","percentile":"0.99252","date":"2026-10-31"},{"cve":"CVE-2014-2120","epss":"0.22558","percentile":"0.97714","date":"2026-10-31"},{"cve":"CVE-2014-2817","epss":"0.26349","percentile":"0.98006","date":"2026-10-31"},{"cve":"CVE-2014-3120","epss":"0.88559","percentile":"0.99773","date":"2026-10-31"},{"cve":"CVE-2014-3153","epss":"0.37233","percentile":"0.98524","date":"2026-10-31"},{"cve":"CVE-2014-3931","epss":"0.28978","percentile":"0.98157","date":"2026-10-31"},{"cve":"CVE-2014-4077","epss":"0.54577","percentile":"0.99018","date":"2026-10-31"},{"cve":"CVE-2014-4113","epss":"0.86648","percentile":"0.99741","date":"2026-10-31"},{"cve":"CVE-2014-4114","epss":"0.81628","percentile":"0.99642","date":"2026-10-31"},{"cve":"CVE-2014-4123","epss":"0.47133","percentile":"0.98835","date":"2026-10-31"},{"cve":"CVE-2014-4148","epss":"0.5985","percentile":"0.99131","date":"2026-10-31"},{"cve":"CVE-2014-4404","epss":"0.48923","percentile":"0.98879","date":"2026-10-31"},{"cve":"CVE-2014-6271","epss":"0.99999","percentile":"0.99993","date":"2026-10-31"},{"cve":"CVE-2014-6278","epss":"0.99669","percentile":"0.9995","date":"2026-10-31"},{"cve":"CVE-2014-6287","epss":"0.99323","percentile":"0.99939","date":"2026-10-31"},{"cve":"CVE-2014-6324","epss":"0.87335","percentile":"0.99754","date":"2026-10-31"},{"cve":"CVE-2014-6332","epss":"0.94918","percentile":"0.9986","date":"2026-10-31"},{"cve":"CVE-2014-6352","epss":"0.77485","percentile":"0.9956","date":"2026-10-31"},{"cve":"CVE-2014-7169","epss":"0.9994","percentile":"0.99972","date":"2026-10-31"},{"cve":"CVE-2014-8361","epss":"0.99971","percentile":"0.99978","date":"2026-10-31"},{"cve":"CVE-2014-8439","epss":"0.20369","percentile":"0.97488","date":"2026-10-31"},{"cve":"CVE-2014-9163","epss":"0.4488","percentile":"0.98777","date":"2026-10-31"},{"cve":"CVE-2015-0016","epss":"0.75777","percentile":"0.99524","date":"2026-10-31"},{"cve":"CVE-2015-0071","epss":"0.33581","percentile":"0.98382","date":"2026-10-31"},{"cve":"CVE-2015-0310","epss":"0.15097","percentile":"0.96735","date":"2026-10-31"},{"cve":"CVE-2015-0311","epss":"0.85589","percentile":"0.99724","date":"2026-10-31"},{"cve":"CVE-2015-0313","epss":"0.95341","percentile":"0.99867","date":"2026-10-31"},{"cve":"CVE-2015-0666","epss":"0.40379","percentile":"0.98644","date":"2026-10-31"},{"cve":"CVE-2015-1130","epss":"0.09887","percentile":"0.95573","date":"2026-10-31"},{"cve":"CVE-2015-1187","epss":"0.82685","percentile":"0.99667","date":"2026-10-31"},{"cve":"CVE-2015-1427","epss":"0.99906","percentile":"0.99966","date":"2026-10-31"},{"cve":"CVE-2015-1635","epss":"0.99999","percentile":"0.99997","date":"2026-10-31"},{"cve":"CVE-2015-1641","epss":"0.97246","percentile":"0.99896","date":"2026-10-31"},{"cve":"CVE-2015-1642","epss":"0.53087","percentile":"0.98979","date":"2026-10-31"},{"cve":"CVE-2015-1671","epss":"0.48832","percentile":"0.98876","date":"2026-10-31"},{"cve":"CVE-2015-1701","epss":"0.55923","percentile":"0.99046","date":"2026-10-31"},{"cve":"CVE-2015-1769","epss":"0.04078","percentile":"0.90703","date":"2026-10-31"},{"cve":"CVE-2015-1770","epss":"0.34995","percentile":"0.98434","date":"2026-10-31"},{"cve":"CVE-2015-2051","epss":"0.97101","percentile":"0.99893","date":"2026-10-31"},{"cve":"CVE-2015-2291","epss":"0.15685","percentile":"0.96858","date":"2026-10-31"},{"cve":"CVE-2015-2360","epss":"0.1484","percentile":"0.96693","date":"2026-10-31"},{"cve":"CVE-2015-2387","epss":"0.34878","percentile":"0.98431","date":"2026-10-31"},{"cve":"CVE-2015-2419","epss":"0.5298","percentile":"0.98977","date":"2026-10-31"},{"cve":"CVE-2015-2424","epss":"0.40124","percentile":"0.98636","date":"2026-10-31"},{"cve":"CVE-2015-2425","epss":"0.44727","percentile":"0.98772","date":"2026-10-31"},{"cve":"CVE-2015-2426","epss":"0.86576","percentile":"0.99738","date":"2026-10-31"},{"cve":"CVE-2015-2502","epss":"0.51001","percentile":"0.98929","date":"2026-10-31"},{"cve":"CVE-2015-2545","epss":"0.85937","percentile":"0.99729","date":"2026-10-31"},{"cve":"CVE-2015-2546","epss":"0.10107","percentile":"0.95642","date":"2026-10-31"},{"cve":"CVE-2015-2590","epss":"0.25469","percentile":"0.97952","date":"2026-10-31"},{"cve":"CVE-2015-3035","epss":"0.83948","percentile":"0.99693","date":"2026-10-31"},{"cve":"CVE-2015-3043","epss":"0.73862","percentile":"0.99478","date":"2026-10-31"},{"cve":"CVE-2015-3113","epss":"0.99812","percentile":"0.99959","date":"2026-10-31"},{"cve":"CVE-2015-3246","epss":"0.08503","percentile":"0.95038","date":"2026-10-31"},{"cve":"CVE-2015-3306","epss":"0.99497","percentile":"0.99945","date":"2026-10-31"},{"cve":"CVE-2015-4068","epss":"0.63643","percentile":"0.99216","date":"2026-10-31"},{"cve":"CVE-2015-4495","epss":"0.68558","percentile":"0.99338","date":"2026-10-31"},{"cve":"CVE-2015-4852","epss":"0.94991","percentile":"0.99861","date":"2026-10-31"},{"cve":"CVE-2015-4902","epss":"0.13603","percentile":"0.9647","date":"2026-10-31"},{"cve":"CVE-2015-5119","epss":"0.98618","percentile":"0.99923","date":"2026-10-31"},{"cve":"CVE-2015-5122","epss":"0.87033","percentile":"0.99748","date":"2026-10-31"},{"cve":"CVE-2015-5123","epss":"0.1883","percentile":"0.97284","date":"2026-10-31"},{"cve":"CVE-2015-5287","epss":"0.05003","percentile":"0.92238","date":"2026-10-31"},{"cve":"CVE-2015-5317","epss":"0.23003","percentile":"0.97752","date":"2026-10-31"},{"cve":"CVE-2015-5477","epss":"0.99584","percentile":"0.99947","date":"2026-10-31"},{"cve":"CVE-2015-6175","epss":"0.05325","percentile":"0.92613","date":"2026-10-31"},{"cve":"CVE-2015-7450","epss":"0.97764","percentile":"0.99905","date":"2026-10-31"},{"cve":"CVE-2015-7645","epss":"0.65339","percentile":"0.99257","date":"2026-10-31"},{"cve":"CVE-2015-7755","epss":"0.61139","percentile":"0.9916","date":"2026-10-31"},{"cve":"CVE-2015-8651","epss":"0.67698","percentile":"0.99315","date":"2026-10-31"},{"cve":"CVE-2016-0034","epss":"0.69397","percentile":"0.99359","date":"2026-10-31"},{"cve":"CVE-2016-0040","epss":"0.24283","percentile":"0.97863","date":"2026-10-31"},{"cve":"CVE-2016-0099","epss":"0.37045","percentile":"0.98516","date":"2026-10-31"},{"cve":"CVE-2016-0151","epss":"0.62823","percentile":"0.99196","date":"2026-10-31"},{"cve":"CVE-2016-0162","epss":"0.21932","percentile":"0.97653","date":"2026-10-31"},{"cve":"CVE-2016-0165","epss":"0.1368","percentile":"0.9649","date":"2026-10-31"},{"cve":"CVE-2016-0167","epss":"0.05661","percentile":"0.92976","date":"2026-10-31"},{"cve":"CVE-2016-0185","epss":"0.69846","percentile":"0.9937","date":"2026-10-31"},{"cve":"CVE-2016-0189","epss":"0.94062","percentile":"0.99847","date":"2026-10-31"},{"cve":"CVE-2016-0752","epss":"0.95537","percentile":"0.9987","date":"2026-10-31"},{"cve":"CVE-2016-0984","epss":"0.54544","percentile":"0.99017","date":"2026-10-31"},{"cve":"CVE-2016-10033","epss":"0.99714","percentile":"0.99952","date":"2026-10-31"},{"cve":"CVE-2016-10174","epss":"0.83328","percentile":"0.9968","date":"2026-10-31"},{"cve":"CVE-2016-11021","epss":"0.69582","percentile":"0.99364","date":"2026-10-31"},{"cve":"CVE-2016-1010","epss":"0.19333","percentile":"0.97346","date":"2026-10-31"},{"cve":"CVE-2016-1019","epss":"0.22316","percentile":"0.97686","date":"2026-10-31"},{"cve":"CVE-2016-1555","epss":"0.98288","percentile":"0.99916","date":"2026-10-31"},{"cve":"CVE-2016-1646","epss":"0.4811","percentile":"0.98859","date":"2026-10-31"},{"cve":"CVE-2016-20017","epss":"0.65777","percentile":"0.99267","date":"2026-10-31"},{"cve":"CVE-2016-2386","epss":"0.71522","percentile":"0.99417","date":"2026-10-31"},{"cve":"CVE-2016-2388","epss":"0.52206","percentile":"0.9896","date":"2026-10-31"},{"cve":"CVE-2016-3081","epss":"0.96525","percentile":"0.99882","date":"2026-10-31"},{"cve":"CVE-2016-3088","epss":"0.98518","percentile":"0.99921","date":"2026-10-31"},{"cve":"CVE-2016-3235","epss":"0.43308","percentile":"0.98729","date":"2026-10-31"},{"cve":"CVE-2016-3298","epss":"0.33332","percentile":"0.98372","date":"2026-10-31"},{"cve":"CVE-2016-3309","epss":"0.20467","percentile":"0.97507","date":"2026-10-31"},{"cve":"CVE-2016-3351","epss":"0.26483","percentile":"0.98011","date":"2026-10-31"},{"cve":"CVE-2016-3393","epss":"0.68465","percentile":"0.99336","date":"2026-10-31"},{"cve":"CVE-2016-3427","epss":"0.92334","percentile":"0.99823","date":"2026-10-31"},{"cve":"CVE-2016-3643","epss":"0.03674","percentile":"0.89665","date":"2026-10-31"},{"cve":"CVE-2016-3714","epss":"0.97485","percentile":"0.999","date":"2026-10-31"},{"cve":"CVE-2016-3715","epss":"0.75307","percentile":"0.99513","date":"2026-10-31"},{"cve":"CVE-2016-3718","epss":"0.7565","percentile":"0.99521","date":"2026-10-31"},{"cve":"CVE-2016-3976","epss":"0.47252","percentile":"0.98838","date":"2026-10-31"},{"cve":"CVE-2016-4117","epss":"0.94271","percentile":"0.9985","date":"2026-10-31"},{"cve":"CVE-2016-4171","epss":"0.20055","percentile":"0.97446","date":"2026-10-31"},{"cve":"CVE-2016-4437","epss":"0.93039","percentile":"0.99832","date":"2026-10-31"},{"cve":"CVE-2016-4523","epss":"0.31167","percentile":"0.9827","date":"2026-10-31"},{"cve":"CVE-2016-4655","epss":"0.33353","percentile":"0.98374","date":"2026-10-31"},{"cve":"CVE-2016-4656","epss":"0.23626","percentile":"0.9781","date":"2026-10-31"},{"cve":"CVE-2016-4657","epss":"0.66788","percentile":"0.99291","date":"2026-10-31"},{"cve":"CVE-2016-5195","epss":"0.83524","percentile":"0.99685","date":"2026-10-31"},{"cve":"CVE-2016-5198","epss":"0.34164","percentile":"0.98402","date":"2026-10-31"},{"cve":"CVE-2016-6277","epss":"0.99803","percentile":"0.99958","date":"2026-10-31"},{"cve":"CVE-2016-6366","epss":"0.87565","percentile":"0.99758","date":"2026-10-31"},{"cve":"CVE-2016-6367","epss":"0.22583","percentile":"0.97716","date":"2026-10-31"},{"cve":"CVE-2016-6415","epss":"0.87687","percentile":"0.9976","date":"2026-10-31"},{"cve":"CVE-2016-7193","epss":"0.57582","percentile":"0.99082","date":"2026-10-31"},{"cve":"CVE-2016-7200","epss":"0.82779","percentile":"0.9967","date":"2026-10-31"},{"cve":"CVE-2016-7201","epss":"0.80004","percentile":"0.99614","date":"2026-10-31"},{"cve":"CVE-2016-7255","epss":"0.80968","percentile":"0.99631","date":"2026-10-31"},{"cve":"CVE-2016-7256","epss":"0.64591","percentile":"0.9924","date":"2026-10-31"},{"cve":"CVE-2016-7262","epss":"0.57733","percentile":"0.99084","date":"2026-10-31"},{"cve":"CVE-2016-7836","epss":"0.1923","percentile":"0.97333","date":"2026-10-31"},{"cve":"CVE-2016-7855","epss":"0.25198","percentile":"0.97935","date":"2026-10-31"},{"cve":"CVE-2016-7892","epss":"0.18786","percentile":"0.97279","date":"2026-10-31"},{"cve":"CVE-2016-8562","epss":"0.0361","percentile":"0.89485","date":"2026-10-31"},{"cve":"CVE-2016-8735","epss":"0.90338","percentile":"0.99798","date":"2026-10-31"},{"cve":"CVE-2016-9079","epss":"0.87357","percentile":"0.99755","date":"2026-10-31"},{"cve":"CVE-2016-9563","epss":"0.24226","percentile":"0.97857","date":"2026-10-31"},{"cve":"CVE-2017-0001","epss":"0.03114","percentile":"0.87808","date":"2026-10-31"},{"cve":"CVE-2017-0005","epss":"0.11022","percentile":"0.95907","date":"2026-10-31"},{"cve":"CVE-2017-0022","epss":"0.18069","percentile":"0.97195","date":"2026-10-31"},{"cve":"CVE-2017-0037","epss":"0.80386","percentile":"0.99622","date":"2026-10-31"},{"cve":"CVE-2017-0059","epss":"0.61968","percentile":"0.99176","date":"2026-10-31"},{"cve":"CVE-2017-0101","epss":"0.57482","percentile":"0.99081","date":"2026-10-31"},{"cve":"CVE-2017-0143","epss":"0.93307","percentile":"0.99837","date":"2026-10-31"},{"cve":"CVE-2017-0144","epss":"0.9923","percentile":"0.99936","date":"2026-10-31"},{"cve":"CVE-2017-0145","epss":"0.8985","percentile":"0.9979","date":"2026-10-31"},{"cve":"CVE-2017-0146","epss":"0.89755","percentile":"0.99789","date":"2026-10-31"},{"cve":"CVE-2017-0147","epss":"0.99693","percentile":"0.99951","date":"2026-10-31"},{"cve":"CVE-2017-0148","epss":"0.99356","percentile":"0.9994","date":"2026-10-31"},{"cve":"CVE-2017-0149","epss":"0.29178","percentile":"0.98169","date":"2026-10-31"},{"cve":"CVE-2017-0199","epss":"0.99497","percentile":"0.99945","date":"2026-10-31"},{"cve":"CVE-2017-0210","epss":"0.22334","percentile":"0.97688","date":"2026-10-31"},{"cve":"CVE-2017-0213","epss":"0.84258","percentile":"0.99697","date":"2026-10-31"},{"cve":"CVE-2017-0222","epss":"0.29645","percentile":"0.98193","date":"2026-10-31"},{"cve":"CVE-2017-0261","epss":"0.7813","percentile":"0.99577","date":"2026-10-31"},{"cve":"CVE-2017-0262","epss":"0.81005","percentile":"0.99631","date":"2026-10-31"},{"cve":"CVE-2017-0263","epss":"0.10034","percentile":"0.95619","date":"2026-10-31"},{"cve":"CVE-2017-1000253","epss":"0.10695","percentile":"0.95813","date":"2026-10-31"},{"cve":"CVE-2017-1000353","epss":"0.99679","percentile":"0.99951","date":"2026-10-31"},{"cve":"CVE-2017-1000486","epss":"0.94104","percentile":"0.99847","date":"2026-10-31"},{"cve":"CVE-2017-10271","epss":"0.99994","percentile":"0.99987","date":"2026-10-31"},{"cve":"CVE-2017-11292","epss":"0.11885","percentile":"0.96101","date":"2026-10-31"},{"cve":"CVE-2017-11317","epss":"0.84175","percentile":"0.99695","date":"2026-10-31"},{"cve":"CVE-2017-11357","epss":"0.77679","percentile":"0.99565","date":"2026-10-31"},{"cve":"CVE-2017-11774","epss":"0.59627","percentile":"0.99126","date":"2026-10-31"},{"cve":"CVE-2017-11826","epss":"0.81333","percentile":"0.99637","date":"2026-10-31"},{"cve":"CVE-2017-11882","epss":"0.99945","percentile":"0.99973","date":"2026-10-31"},{"cve":"CVE-2017-12149","epss":"0.90713","percentile":"0.99803","date":"2026-10-31"},{"cve":"CVE-2017-12231","epss":"0.0707","percentile":"0.94215","date":"2026-10-31"},{"cve":"CVE-2017-12232","epss":"0.02153","percentile":"0.82156","date":"2026-10-31"},{"cve":"CVE-2017-12233","epss":"0.0707","percentile":"0.94214","date":"2026-10-31"},{"cve":"CVE-2017-12234","epss":"0.0707","percentile":"0.94215","date":"2026-10-31"},{"cve":"CVE-2017-12235","epss":"0.0707","percentile":"0.94214","date":"2026-10-31"},{"cve":"CVE-2017-12237","epss":"0.0707","percentile":"0.94214","date":"2026-10-31"},{"cve":"CVE-2017-12238","epss":"0.02017","percentile":"0.80921","date":"2026-10-31"},{"cve":"CVE-2017-12240","epss":"0.13773","percentile":"0.96514","date":"2026-10-31"},{"cve":"CVE-2017-12319","epss":"0.05243","percentile":"0.92532","date":"2026-10-31"},{"cve":"CVE-2017-12615","epss":"0.99707","percentile":"0.99952","date":"2026-10-31"},{"cve":"CVE-2017-12617","epss":"0.99968","percentile":"0.99977","date":"2026-10-31"},{"cve":"CVE-2017-12637","epss":"0.95111","percentile":"0.99863","date":"2026-10-31"},{"cve":"CVE-2017-15944","epss":"0.9834","percentile":"0.99917","date":"2026-10-31"},{"cve":"CVE-2017-16651","epss":"0.45742","percentile":"0.98799","date":"2026-10-31"},{"cve":"CVE-2017-17562","epss":"0.97127","percentile":"0.99894","date":"2026-10-31"},{"cve":"CVE-2017-18362","epss":"0.8682","percentile":"0.99743","date":"2026-10-31"},{"cve":"CVE-2017-18368","epss":"0.94508","percentile":"0.99853","date":"2026-10-31"},{"cve":"CVE-2017-3066","epss":"0.90597","percentile":"0.99802","date":"2026-10-31"},{"cve":"CVE-2017-3506","epss":"0.95991","percentile":"0.99875","date":"2026-10-31"},{"cve":"CVE-2017-3881","epss":"0.9895","percentile":"0.99929","date":"2026-10-31"},{"cve":"CVE-2017-5030","epss":"0.40635","percentile":"0.98651","date":"2026-10-31"},{"cve":"CVE-2017-5070","epss":"0.32071","percentile":"0.98313","date":"2026-10-31"},{"cve":"CVE-2017-5521","epss":"0.89353","percentile":"0.99783","date":"2026-10-31"},{"cve":"CVE-2017-5638","epss":"0.99999","percentile":"0.99994","date":"2026-10-31"},{"cve":"CVE-2017-5689","epss":"0.92189","percentile":"0.99822","date":"2026-10-31"},{"cve":"CVE-2017-6077","epss":"0.68712","percentile":"0.99342","date":"2026-10-31"},{"cve":"CVE-2017-6316","epss":"0.7303","percentile":"0.99454","date":"2026-10-31"},{"cve":"CVE-2017-6327","epss":"0.35911","percentile":"0.98469","date":"2026-10-31"},{"cve":"CVE-2017-6334","epss":"0.7264","percentile":"0.99444","date":"2026-10-31"},{"cve":"CVE-2017-6627","epss":"0.06158","percentile":"0.93478","date":"2026-10-31"},{"cve":"CVE-2017-6663","epss":"0.02117","percentile":"0.81847","date":"2026-10-31"},{"cve":"CVE-2017-6736","epss":"0.70354","percentile":"0.99385","date":"2026-10-31"},{"cve":"CVE-2017-6737","epss":"0.44964","percentile":"0.9878","date":"2026-10-31"},{"cve":"CVE-2017-6738","epss":"0.10855","percentile":"0.95859","date":"2026-10-31"},{"cve":"CVE-2017-6739","epss":"0.10855","percentile":"0.95859","date":"2026-10-31"},{"cve":"CVE-2017-6740","epss":"0.111","percentile":"0.95927","date":"2026-10-31"},{"cve":"CVE-2017-6742","epss":"0.21424","percentile":"0.97611","date":"2026-10-31"},{"cve":"CVE-2017-6743","epss":"0.10855","percentile":"0.95858","date":"2026-10-31"},{"cve":"CVE-2017-6744","epss":"0.07292","percentile":"0.94365","date":"2026-10-31"},{"cve":"CVE-2017-6862","epss":"0.45748","percentile":"0.988","date":"2026-10-31"},{"cve":"CVE-2017-6884","epss":"0.32976","percentile":"0.98359","date":"2026-10-31"},{"cve":"CVE-2017-7269","epss":"0.99823","percentile":"0.9996","date":"2026-10-31"},{"cve":"CVE-2017-7494","epss":"0.99448","percentile":"0.99943","date":"2026-10-31"},{"cve":"CVE-2017-7921","epss":"0.99998","percentile":"0.9999","date":"2026-10-31"},{"cve":"CVE-2017-8291","epss":"0.96968","percentile":"0.99889","date":"2026-10-31"},{"cve":"CVE-2017-8464","epss":"0.90026","percentile":"0.99793","date":"2026-10-31"},{"cve":"CVE-2017-8540","epss":"0.71874","percentile":"0.99427","date":"2026-10-31"},{"cve":"CVE-2017-8543","epss":"0.74164","percentile":"0.99486","date":"2026-10-31"},{"cve":"CVE-2017-8570","epss":"0.89889","percentile":"0.99791","date":"2026-10-31"},{"cve":"CVE-2017-8759","epss":"0.88698","percentile":"0.99775","date":"2026-10-31"},{"cve":"CVE-2017-9248","epss":"0.75098","percentile":"0.99509","date":"2026-10-31"},{"cve":"CVE-2017-9791","epss":"0.98908","percentile":"0.99928","date":"2026-10-31"},{"cve":"CVE-2017-9805","epss":"0.99396","percentile":"0.99941","date":"2026-10-31"},{"cve":"CVE-2017-9822","epss":"0.94789","percentile":"0.99859","date":"2026-10-31"},{"cve":"CVE-2017-9841","epss":"0.99999","percentile":"0.99994","date":"2026-10-31"},{"cve":"CVE-2018-0125","epss":"0.55186","percentile":"0.99029","date":"2026-10-31"},{"cve":"CVE-2018-0147","epss":"0.18212","percentile":"0.97211","date":"2026-10-31"},{"cve":"CVE-2018-0151","epss":"0.14197","percentile":"0.96584","date":"2026-10-31"},{"cve":"CVE-2018-0154","epss":"0.0707","percentile":"0.94214","date":"2026-10-31"},{"cve":"CVE-2018-0155","epss":"0.07742","percentile":"0.94629","date":"2026-10-31"},{"cve":"CVE-2018-0156","epss":"0.0936","percentile":"0.95391","date":"2026-10-31"},{"cve":"CVE-2018-0158","epss":"0.0719","percentile":"0.94303","date":"2026-10-31"},{"cve":"CVE-2018-0159","epss":"0.0687","percentile":"0.94056","date":"2026-10-31"},{"cve":"CVE-2018-0161","epss":"0.04116","percentile":"0.90785","date":"2026-10-31"},{"cve":"CVE-2018-0167","epss":"0.03354","percentile":"0.88697","date":"2026-10-31"},{"cve":"CVE-2018-0171","epss":"0.99479","percentile":"0.99944","date":"2026-10-31"},{"cve":"CVE-2018-0172","epss":"0.0782","percentile":"0.94671","date":"2026-10-31"},{"cve":"CVE-2018-0173","epss":"0.07608","percentile":"0.94551","date":"2026-10-31"},{"cve":"CVE-2018-0174","epss":"0.07608","percentile":"0.94551","date":"2026-10-31"},{"cve":"CVE-2018-0175","epss":"0.03478","percentile":"0.89101","date":"2026-10-31"},{"cve":"CVE-2018-0179","epss":"0.04935","percentile":"0.92141","date":"2026-10-31"},{"cve":"CVE-2018-0180","epss":"0.04935","percentile":"0.92141","date":"2026-10-31"},{"cve":"CVE-2018-0296","epss":"0.99898","percentile":"0.99966","date":"2026-10-31"},{"cve":"CVE-2018-0798","epss":"0.95121","percentile":"0.99863","date":"2026-10-31"},{"cve":"CVE-2018-0802","epss":"0.93289","percentile":"0.99836","date":"2026-10-31"},{"cve":"CVE-2018-0824","epss":"0.73037","percentile":"0.99455","date":"2026-10-31"},{"cve":"CVE-2018-1000861","epss":"0.98326","percentile":"0.99917","date":"2026-10-31"},{"cve":"CVE-2018-10561","epss":"0.92818","percentile":"0.9983","date":"2026-10-31"},{"cve":"CVE-2018-10562","epss":"0.99949","percentile":"0.99973","date":"2026-10-31"},{"cve":"CVE-2018-11138","epss":"0.91719","percentile":"0.99815","date":"2026-10-31"},{"cve":"CVE-2018-11776","epss":"0.99996","percentile":"0.99989","date":"2026-10-31"},{"cve":"CVE-2018-13374","epss":"0.38088","percentile":"0.98557","date":"2026-10-31"},{"cve":"CVE-2018-13379","epss":"0.99999","percentile":"0.99994","date":"2026-10-31"},{"cve":"CVE-2018-13382","epss":"0.81691","percentile":"0.99643","date":"2026-10-31"},{"cve":"CVE-2018-13383","epss":"0.32473","percentile":"0.98336","date":"2026-10-31"},{"cve":"CVE-2018-14558","epss":"0.0851","percentile":"0.95041","date":"2026-10-31"},{"cve":"CVE-2018-14634","epss":"0.14689","percentile":"0.96668","date":"2026-10-31"},{"cve":"CVE-2018-14667","epss":"0.74202","percentile":"0.99487","date":"2026-10-31"},{"cve":"CVE-2018-14839","epss":"0.89246","percentile":"0.99781","date":"2026-10-31"},{"cve":"CVE-2018-14847","epss":"0.95981","percentile":"0.99875","date":"2026-10-31"},{"cve":"CVE-2018-14933","epss":"0.94761","percentile":"0.99858","date":"2026-10-31"},{"cve":"CVE-2018-15133","epss":"0.7657","percentile":"0.99543","date":"2026-10-31"},{"cve":"CVE-2018-15811","epss":"0.76304","percentile":"0.99538","date":"2026-10-31"},{"cve":"CVE-2018-15961","epss":"0.9995","percentile":"0.99974","date":"2026-10-31"},{"cve":"CVE-2018-15982","epss":"0.89581","percentile":"0.99787","date":"2026-10-31"},{"cve":"CVE-2018-17463","epss":"0.84564","percentile":"0.99702","date":"2026-10-31"},{"cve":"CVE-2018-17480","epss":"0.3564","percentile":"0.98459","date":"2026-10-31"},{"cve":"CVE-2018-18325","epss":"0.74048","percentile":"0.99483","date":"2026-10-31"},{"cve":"CVE-2018-18809","epss":"0.79064","percentile":"0.99597","date":"2026-10-31"},{"cve":"CVE-2018-19320","epss":"0.04597","percentile":"0.91658","date":"2026-10-31"},{"cve":"CVE-2018-19321","epss":"0.03701","percentile":"0.89737","date":"2026-10-31"},{"cve":"CVE-2018-19322","epss":"0.01816","percentile":"0.78694","date":"2026-10-31"},{"cve":"CVE-2018-19323","epss":"0.08364","percentile":"0.94966","date":"2026-10-31"},{"cve":"CVE-2018-19410","epss":"0.97939","percentile":"0.99909","date":"2026-10-31"},{"cve":"CVE-2018-19943","epss":"0.22682","percentile":"0.97724","date":"2026-10-31"},{"cve":"CVE-2018-19949","epss":"0.3016","percentile":"0.98218","date":"2026-10-31"},{"cve":"CVE-2018-19953","epss":"0.30527","percentile":"0.98239","date":"2026-10-31"},{"cve":"CVE-2018-1273","epss":"0.96956","percentile":"0.99889","date":"2026-10-31"},{"cve":"CVE-2018-20062","epss":"0.9953","percentile":"0.99946","date":"2026-10-31"},{"cve":"CVE-2018-20250","epss":"0.96004","percentile":"0.99876","date":"2026-10-31"},{"cve":"CVE-2018-20753","epss":"0.29551","percentile":"0.98188","date":"2026-10-31"},{"cve":"CVE-2018-2380","epss":"0.28934","percentile":"0.98155","date":"2026-10-31"},{"cve":"CVE-2018-2628","epss":"0.99958","percentile":"0.99975","date":"2026-10-31"},{"cve":"CVE-2018-4063","epss":"0.2726","percentile":"0.98058","date":"2026-10-31"},{"cve":"CVE-2018-4344","epss":"0.02374","percentile":"0.83855","date":"2026-10-31"},{"cve":"CVE-2018-4878","epss":"0.9028","percentile":"0.99798","date":"2026-10-31"},{"cve":"CVE-2018-4939","epss":"0.6178","percentile":"0.99173","date":"2026-10-31"},{"cve":"CVE-2018-4990","epss":"0.3594","percentile":"0.9847","date":"2026-10-31"},{"cve":"CVE-2018-5002","epss":"0.24441","percentile":"0.97873","date":"2026-10-31"},{"cve":"CVE-2018-5430","epss":"0.48054","percentile":"0.98857","date":"2026-10-31"},{"cve":"CVE-2018-6065","epss":"0.60304","percentile":"0.9914","date":"2026-10-31"},{"cve":"CVE-2018-6530","epss":"0.96682","percentile":"0.99884","date":"2026-10-31"},{"cve":"CVE-2018-6789","epss":"0.82137","percentile":"0.99655","date":"2026-10-31"},{"cve":"CVE-2018-6882","epss":"0.29761","percentile":"0.98198","date":"2026-10-31"},{"cve":"CVE-2018-6961","epss":"0.85342","percentile":"0.99717","date":"2026-10-31"},{"cve":"CVE-2018-7445","epss":"0.65828","percentile":"0.99268","date":"2026-10-31"},{"cve":"CVE-2018-7600","epss":"0.99991","percentile":"0.99985","date":"2026-10-31"},{"cve":"CVE-2018-7602","epss":"0.99172","percentile":"0.99934","date":"2026-10-31"},{"cve":"CVE-2018-7841","epss":"0.72486","percentile":"0.9944","date":"2026-10-31"},{"cve":"CVE-2018-8120","epss":"0.73288","percentile":"0.9946","date":"2026-10-31"},{"cve":"CVE-2018-8174","epss":"0.88243","percentile":"0.99768","date":"2026-10-31"},{"cve":"CVE-2018-8298","epss":"0.74694","percentile":"0.99502","date":"2026-10-31"},{"cve":"CVE-2018-8373","epss":"0.6177","percentile":"0.99172","date":"2026-10-31"},{"cve":"CVE-2018-8405","epss":"0.03444","percentile":"0.88997","date":"2026-10-31"},{"cve":"CVE-2018-8406","epss":"0.03444","percentile":"0.88997","date":"2026-10-31"},{"cve":"CVE-2018-8414","epss":"0.72621","percentile":"0.99443","date":"2026-10-31"},{"cve":"CVE-2018-8440","epss":"0.1853","percentile":"0.9725","date":"2026-10-31"},{"cve":"CVE-2018-8453","epss":"0.70042","percentile":"0.99376","date":"2026-10-31"},{"cve":"CVE-2018-8581","epss":"0.27558","percentile":"0.98077","date":"2026-10-31"},{"cve":"CVE-2018-8589","epss":"0.03023","percentile":"0.8746","date":"2026-10-31"},{"cve":"CVE-2018-8611","epss":"0.04196","percentile":"0.9095","date":"2026-10-31"},{"cve":"CVE-2018-8639","epss":"0.22179","percentile":"0.97674","date":"2026-10-31"},{"cve":"CVE-2018-8653","epss":"0.29606","percentile":"0.98191","date":"2026-10-31"},{"cve":"CVE-2018-9276","epss":"0.86996","percentile":"0.99747","date":"2026-10-31"},{"cve":"CVE-2019-0193","epss":"0.83547","percentile":"0.99686","date":"2026-10-31"},{"cve":"CVE-2019-0211","epss":"0.65005","percentile":"0.99249","date":"2026-10-31"},{"cve":"CVE-2019-0344","epss":"0.07469","percentile":"0.94468","date":"2026-10-31"},{"cve":"CVE-2019-0541","epss":"0.53202","percentile":"0.98982","date":"2026-10-31"},{"cve":"CVE-2019-0543","epss":"0.04679","percentile":"0.91777","date":"2026-10-31"},{"cve":"CVE-2019-0604","epss":"0.99913","percentile":"0.99968","date":"2026-10-31"},{"cve":"CVE-2019-0676","epss":"0.0811","percentile":"0.94827","date":"2026-10-31"},{"cve":"CVE-2019-0703","epss":"0.09385","percentile":"0.95402","date":"2026-10-31"},{"cve":"CVE-2019-0708","epss":"0.99999","percentile":"0.99999","date":"2026-10-31"},{"cve":"CVE-2019-0752","epss":"0.81679","percentile":"0.99642","date":"2026-10-31"},{"cve":"CVE-2019-0797","epss":"0.01874","percentile":"0.79389","date":"2026-10-31"},{"cve":"CVE-2019-0803","epss":"0.4523","percentile":"0.98786","date":"2026-10-31"},{"cve":"CVE-2019-0808","epss":"0.53017","percentile":"0.98978","date":"2026-10-31"},{"cve":"CVE-2019-0841","epss":"0.414","percentile":"0.98674","date":"2026-10-31"},{"cve":"CVE-2019-0859","epss":"0.04151","percentile":"0.90865","date":"2026-10-31"},{"cve":"CVE-2019-0863","epss":"0.05207","percentile":"0.92493","date":"2026-10-31"},{"cve":"CVE-2019-0880","epss":"0.02308","percentile":"0.83366","date":"2026-10-31"},{"cve":"CVE-2019-0903","epss":"0.21713","percentile":"0.97635","date":"2026-10-31"},{"cve":"CVE-2019-1003029","epss":"0.7444","percentile":"0.99493","date":"2026-10-31"},{"cve":"CVE-2019-1003030","epss":"0.97058","percentile":"0.99892","date":"2026-10-31"},{"cve":"CVE-2019-10068","epss":"0.95074","percentile":"0.99862","date":"2026-10-31"},{"cve":"CVE-2019-10149","epss":"0.99961","percentile":"0.99975","date":"2026-10-31"},{"cve":"CVE-2019-10758","epss":"0.84726","percentile":"0.99707","date":"2026-10-31"},{"cve":"CVE-2019-11001","epss":"0.37542","percentile":"0.98534","date":"2026-10-31"},{"cve":"CVE-2019-11043","epss":"0.99783","percentile":"0.99956","date":"2026-10-31"},{"cve":"CVE-2019-11510","epss":"0.99999","percentile":"0.99995","date":"2026-10-31"},{"cve":"CVE-2019-11539","epss":"0.98544","percentile":"0.99922","date":"2026-10-31"},{"cve":"CVE-2019-11580","epss":"0.95355","percentile":"0.99867","date":"2026-10-31"},{"cve":"CVE-2019-11581","epss":"0.84621","percentile":"0.99704","date":"2026-10-31"},{"cve":"CVE-2019-11634","epss":"0.08091","percentile":"0.94815","date":"2026-10-31"},{"cve":"CVE-2019-11707","epss":"0.37951","percentile":"0.98549","date":"2026-10-31"},{"cve":"CVE-2019-11708","epss":"0.55874","percentile":"0.99044","date":"2026-10-31"},{"cve":"CVE-2019-12989","epss":"0.94957","percentile":"0.9986","date":"2026-10-31"},{"cve":"CVE-2019-12991","epss":"0.7446","percentile":"0.99494","date":"2026-10-31"},{"cve":"CVE-2019-13272","epss":"0.52199","percentile":"0.98959","date":"2026-10-31"},{"cve":"CVE-2019-13608","epss":"0.30041","percentile":"0.98209","date":"2026-10-31"},{"cve":"CVE-2019-13720","epss":"0.49421","percentile":"0.98891","date":"2026-10-31"},{"cve":"CVE-2019-15107","epss":"0.9971","percentile":"0.99952","date":"2026-10-31"},{"cve":"CVE-2019-15271","epss":"0.05488","percentile":"0.92776","date":"2026-10-31"},{"cve":"CVE-2019-15752","epss":"0.48782","percentile":"0.98876","date":"2026-10-31"},{"cve":"CVE-2019-15949","epss":"0.77039","percentile":"0.99551","date":"2026-10-31"},{"cve":"CVE-2019-16057","epss":"0.86491","percentile":"0.99737","date":"2026-10-31"},{"cve":"CVE-2019-16256","epss":"0.04949","percentile":"0.92165","date":"2026-10-31"},{"cve":"CVE-2019-16278","epss":"0.99033","percentile":"0.99931","date":"2026-10-31"},{"cve":"CVE-2019-16759","epss":"0.99728","percentile":"0.99953","date":"2026-10-31"},{"cve":"CVE-2019-16920","epss":"0.99996","percentile":"0.99989","date":"2026-10-31"},{"cve":"CVE-2019-16928","epss":"0.41638","percentile":"0.98683","date":"2026-10-31"},{"cve":"CVE-2019-17026","epss":"0.46311","percentile":"0.98817","date":"2026-10-31"},{"cve":"CVE-2019-17558","epss":"0.98567","percentile":"0.99922","date":"2026-10-31"},{"cve":"CVE-2019-17621","epss":"0.90615","percentile":"0.99802","date":"2026-10-31"},{"cve":"CVE-2019-18187","epss":"0.25125","percentile":"0.97931","date":"2026-10-31"},{"cve":"CVE-2019-18426","epss":"0.67859","percentile":"0.99319","date":"2026-10-31"},{"cve":"CVE-2019-18935","epss":"0.99737","percentile":"0.99954","date":"2026-10-31"},{"cve":"CVE-2019-18988","epss":"0.04707","percentile":"0.91815","date":"2026-10-31"},{"cve":"CVE-2019-19006","epss":"0.55946","percentile":"0.99046","date":"2026-10-31"},{"cve":"CVE-2019-19356","epss":"0.28075","percentile":"0.98108","date":"2026-10-31"},{"cve":"CVE-2019-19781","epss":"0.99999","percentile":"0.99998","date":"2026-10-31"},{"cve":"CVE-2019-1064","epss":"0.06886","percentile":"0.94071","date":"2026-10-31"},{"cve":"CVE-2019-1068","epss":"0.57273","percentile":"0.99074","date":"2026-10-31"},{"cve":"CVE-2019-1069","epss":"0.06117","percentile":"0.93435","date":"2026-10-31"},{"cve":"CVE-2019-1129","epss":"0.01782","percentile":"0.78275","date":"2026-10-31"},{"cve":"CVE-2019-1130","epss":"0.01719","percentile":"0.77464","date":"2026-10-31"},{"cve":"CVE-2019-1132","epss":"0.09867","percentile":"0.95567","date":"2026-10-31"},{"cve":"CVE-2019-1214","epss":"0.01419","percentile":"0.72818","date":"2026-10-31"},{"cve":"CVE-2019-1215","epss":"0.19254","percentile":"0.97337","date":"2026-10-31"},{"cve":"CVE-2019-1253","epss":"0.11616","percentile":"0.96046","date":"2026-10-31"},{"cve":"CVE-2019-1297","epss":"0.21805","percentile":"0.9764","date":"2026-10-31"},{"cve":"CVE-2019-1315","epss":"0.03478","percentile":"0.891","date":"2026-10-31"},{"cve":"CVE-2019-1322","epss":"0.18843","percentile":"0.97287","date":"2026-10-31"},{"cve":"CVE-2019-1367","epss":"0.52449","percentile":"0.98964","date":"2026-10-31"},{"cve":"CVE-2019-1385","epss":"0.03604","percentile":"0.89469","date":"2026-10-31"},{"cve":"CVE-2019-1388","epss":"0.08589","percentile":"0.95079","date":"2026-10-31"},{"cve":"CVE-2019-1405","epss":"0.30168","percentile":"0.98219","date":"2026-10-31"},{"cve":"CVE-2019-1429","epss":"0.7729","percentile":"0.99556","date":"2026-10-31"},{"cve":"CVE-2019-1458","epss":"0.74438","percentile":"0.99493","date":"2026-10-31"},{"cve":"CVE-2019-1579","epss":"0.44159","percentile":"0.98755","date":"2026-10-31"},{"cve":"CVE-2019-1652","epss":"0.95923","percentile":"0.99874","date":"2026-10-31"},{"cve":"CVE-2019-1653","epss":"0.99876","percentile":"0.99964","date":"2026-10-31"},{"cve":"CVE-2019-20085","epss":"0.96071","percentile":"0.99877","date":"2026-10-31"},{"cve":"CVE-2019-20500","epss":"0.96713","percentile":"0.99885","date":"2026-10-31"},{"cve":"CVE-2019-2215","epss":"0.72105","percentile":"0.99432","date":"2026-10-31"},{"cve":"CVE-2019-2616","epss":"0.92183","percentile":"0.99822","date":"2026-10-31"},{"cve":"CVE-2019-2725","epss":"0.99977","percentile":"0.99979","date":"2026-10-31"},{"cve":"CVE-2019-3010","epss":"0.13399","percentile":"0.96422","date":"2026-10-31"},{"cve":"CVE-2019-3396","epss":"0.99913","percentile":"0.99967","date":"2026-10-31"},{"cve":"CVE-2019-3398","epss":"0.97028","percentile":"0.99891","date":"2026-10-31"},{"cve":"CVE-2019-3568","epss":"0.30076","percentile":"0.98212","date":"2026-10-31"},{"cve":"CVE-2019-3929","epss":"0.98952","percentile":"0.99929","date":"2026-10-31"},{"cve":"CVE-2019-4716","epss":"0.86441","percentile":"0.99736","date":"2026-10-31"},{"cve":"CVE-2019-5418","epss":"0.98507","percentile":"0.9992","date":"2026-10-31"},{"cve":"CVE-2019-5544","epss":"0.98129","percentile":"0.99913","date":"2026-10-31"},{"cve":"CVE-2019-5591","epss":"0.18566","percentile":"0.97253","date":"2026-10-31"},{"cve":"CVE-2019-5786","epss":"0.61085","percentile":"0.99158","date":"2026-10-31"},{"cve":"CVE-2019-5825","epss":"0.55925","percentile":"0.99046","date":"2026-10-31"},{"cve":"CVE-2019-6223","epss":"0.02629","percentile":"0.85509","date":"2026-10-31"},{"cve":"CVE-2019-6340","epss":"0.92017","percentile":"0.9982","date":"2026-10-31"},{"cve":"CVE-2019-6693","epss":"0.0664","percentile":"0.9387","date":"2026-10-31"},{"cve":"CVE-2019-7192","epss":"0.88102","percentile":"0.99766","date":"2026-10-31"},{"cve":"CVE-2019-7193","epss":"0.14367","percentile":"0.96616","date":"2026-10-31"},{"cve":"CVE-2019-7194","epss":"0.82713","percentile":"0.99668","date":"2026-10-31"},{"cve":"CVE-2019-7195","epss":"0.89323","percentile":"0.99783","date":"2026-10-31"},{"cve":"CVE-2019-7238","epss":"0.76629","percentile":"0.99545","date":"2026-10-31"},{"cve":"CVE-2019-7256","epss":"0.97081","percentile":"0.99892","date":"2026-10-31"},{"cve":"CVE-2019-7286","epss":"0.15939","percentile":"0.96898","date":"2026-10-31"},{"cve":"CVE-2019-7287","epss":"0.04579","percentile":"0.91631","date":"2026-10-31"},{"cve":"CVE-2019-7481","epss":"0.99906","percentile":"0.99967","date":"2026-10-31"},{"cve":"CVE-2019-7483","epss":"0.0401","percentile":"0.90555","date":"2026-10-31"},{"cve":"CVE-2019-7609","epss":"0.95338","percentile":"0.99866","date":"2026-10-31"},{"cve":"CVE-2019-8394","epss":"0.63336","percentile":"0.99207","date":"2026-10-31"},{"cve":"CVE-2019-8506","epss":"0.16159","percentile":"0.96932","date":"2026-10-31"},{"cve":"CVE-2019-8526","epss":"0.00701","percentile":"0.53243","date":"2026-10-31"},{"cve":"CVE-2019-8605","epss":"0.17609","percentile":"0.97149","date":"2026-10-31"},{"cve":"CVE-2019-8720","epss":"0.01556","percentile":"0.75178","date":"2026-10-31"},{"cve":"CVE-2019-9082","epss":"0.97419","percentile":"0.99899","date":"2026-10-31"},{"cve":"CVE-2019-9621","epss":"0.81037","percentile":"0.99632","date":"2026-10-31"},{"cve":"CVE-2019-9670","epss":"0.99986","percentile":"0.99983","date":"2026-10-31"},{"cve":"CVE-2019-9874","epss":"0.83736","percentile":"0.99688","date":"2026-10-31"},{"cve":"CVE-2019-9875","epss":"0.25436","percentile":"0.97949","date":"2026-10-31"},{"cve":"CVE-2019-9978","epss":"0.72946","percentile":"0.99452","date":"2026-10-31"},{"cve":"CVE-2020-0041","epss":"0.03171","percentile":"0.8803","date":"2026-10-31"},{"cve":"CVE-2020-0069","epss":"0.0137","percentile":"0.71925","date":"2026-10-31"},{"cve":"CVE-2020-0601","epss":"0.89078","percentile":"0.9978","date":"2026-10-31"},{"cve":"CVE-2020-0618","epss":"0.99046","percentile":"0.99931","date":"2026-10-31"},{"cve":"CVE-2020-0638","epss":"0.0237","percentile":"0.83832","date":"2026-10-31"},{"cve":"CVE-2020-0646","epss":"0.99222","percentile":"0.99935","date":"2026-10-31"},{"cve":"CVE-2020-0674","epss":"0.86863","percentile":"0.99745","date":"2026-10-31"},{"cve":"CVE-2020-0683","epss":"0.07605","percentile":"0.94549","date":"2026-10-31"},{"cve":"CVE-2020-0688","epss":"0.99955","percentile":"0.99974","date":"2026-10-31"},{"cve":"CVE-2020-0787","epss":"0.42524","percentile":"0.98707","date":"2026-10-31"},{"cve":"CVE-2020-0796","epss":"0.9981","percentile":"0.99959","date":"2026-10-31"},{"cve":"CVE-2020-0878","epss":"0.02696","percentile":"0.85917","date":"2026-10-31"},{"cve":"CVE-2020-0938","epss":"0.6895","percentile":"0.9935","date":"2026-10-31"},{"cve":"CVE-2020-0968","epss":"0.30676","percentile":"0.98245","date":"2026-10-31"},{"cve":"CVE-2020-0986","epss":"0.16405","percentile":"0.96979","date":"2026-10-31"},{"cve":"CVE-2020-10148","epss":"0.9198","percentile":"0.99819","date":"2026-10-31"},{"cve":"CVE-2020-10181","epss":"0.14938","percentile":"0.96707","date":"2026-10-31"},{"cve":"CVE-2020-10189","epss":"0.99941","percentile":"0.99972","date":"2026-10-31"},{"cve":"CVE-2020-10199","epss":"0.99064","percentile":"0.99932","date":"2026-10-31"},{"cve":"CVE-2020-10221","epss":"0.77123","percentile":"0.99552","date":"2026-10-31"},{"cve":"CVE-2020-10987","epss":"0.7981","percentile":"0.99609","date":"2026-10-31"},{"cve":"CVE-2020-11023","epss":"0.84887","percentile":"0.99711","date":"2026-10-31"},{"cve":"CVE-2020-11261","epss":"0.01604","percentile":"0.75857","date":"2026-10-31"},{"cve":"CVE-2020-11651","epss":"0.96614","percentile":"0.99883","date":"2026-10-31"},{"cve":"CVE-2020-11652","epss":"0.86178","percentile":"0.99732","date":"2026-10-31"},{"cve":"CVE-2020-11738","epss":"0.97822","percentile":"0.99906","date":"2026-10-31"},{"cve":"CVE-2020-11899","epss":"0.1842","percentile":"0.97234","date":"2026-10-31"},{"cve":"CVE-2020-11978","epss":"0.99189","percentile":"0.99934","date":"2026-10-31"},{"cve":"CVE-2020-12271","epss":"0.42434","percentile":"0.98704","date":"2026-10-31"},{"cve":"CVE-2020-12641","epss":"0.84387","percentile":"0.99699","date":"2026-10-31"},{"cve":"CVE-2020-12812","epss":"0.45379","percentile":"0.98789","date":"2026-10-31"},{"cve":"CVE-2020-13671","epss":"0.36167","percentile":"0.98476","date":"2026-10-31"},{"cve":"CVE-2020-13927","epss":"0.99778","percentile":"0.99955","date":"2026-10-31"},{"cve":"CVE-2020-13965","epss":"0.76596","percentile":"0.99543","date":"2026-10-31"},{"cve":"CVE-2020-14644","epss":"0.94548","percentile":"0.99854","date":"2026-10-31"},{"cve":"CVE-2020-14750","epss":"0.99247","percentile":"0.99937","date":"2026-10-31"},{"cve":"CVE-2020-14864","epss":"0.97233","percentile":"0.99895","date":"2026-10-31"},{"cve":"CVE-2020-14871","epss":"0.80157","percentile":"0.99617","date":"2026-10-31"},{"cve":"CVE-2020-14882","epss":"0.99997","percentile":"0.99989","date":"2026-10-31"},{"cve":"CVE-2020-14883","epss":"0.97734","percentile":"0.99904","date":"2026-10-31"},{"cve":"CVE-2020-15069","epss":"0.10674","percentile":"0.95806","date":"2026-10-31"},{"cve":"CVE-2020-15415","epss":"0.8448","percentile":"0.99701","date":"2026-10-31"},{"cve":"CVE-2020-15505","epss":"0.99737","percentile":"0.99954","date":"2026-10-31"},{"cve":"CVE-2020-15999","epss":"0.63894","percentile":"0.99223","date":"2026-10-31"},{"cve":"CVE-2020-16009","epss":"0.48293","percentile":"0.98864","date":"2026-10-31"},{"cve":"CVE-2020-16010","epss":"0.06363","percentile":"0.9365","date":"2026-10-31"},{"cve":"CVE-2020-16013","epss":"0.02756","percentile":"0.86246","date":"2026-10-31"},{"cve":"CVE-2020-16017","epss":"0.0273","percentile":"0.86085","date":"2026-10-31"},{"cve":"CVE-2020-16846","epss":"0.99585","percentile":"0.99947","date":"2026-10-31"},{"cve":"CVE-2020-17087","epss":"0.05431","percentile":"0.92714","date":"2026-10-31"},{"cve":"CVE-2020-17144","epss":"0.36514","percentile":"0.98492","date":"2026-10-31"},{"cve":"CVE-2020-17463","epss":"0.89689","percentile":"0.99788","date":"2026-10-31"},{"cve":"CVE-2020-17496","epss":"0.87478","percentile":"0.99757","date":"2026-10-31"},{"cve":"CVE-2020-17519","epss":"0.98001","percentile":"0.99909","date":"2026-10-31"},{"cve":"CVE-2020-17530","epss":"0.96251","percentile":"0.99878","date":"2026-10-31"},{"cve":"CVE-2020-1020","epss":"0.65037","percentile":"0.9925","date":"2026-10-31"},{"cve":"CVE-2020-1027","epss":"0.04723","percentile":"0.91838","date":"2026-10-31"},{"cve":"CVE-2020-1040","epss":"0.07393","percentile":"0.94427","date":"2026-10-31"},{"cve":"CVE-2020-1054","epss":"0.53878","percentile":"0.99001","date":"2026-10-31"},{"cve":"CVE-2020-1147","epss":"0.95804","percentile":"0.99872","date":"2026-10-31"},{"cve":"CVE-2020-1350","epss":"0.96721","percentile":"0.99885","date":"2026-10-31"},{"cve":"CVE-2020-1380","epss":"0.24188","percentile":"0.97855","date":"2026-10-31"},{"cve":"CVE-2020-1464","epss":"0.38946","percentile":"0.9859","date":"2026-10-31"},{"cve":"CVE-2020-1472","epss":"0.99389","percentile":"0.9994","date":"2026-10-31"},{"cve":"CVE-2020-1631","epss":"0.04865","percentile":"0.92043","date":"2026-10-31"},{"cve":"CVE-2020-1938","epss":"0.9927","percentile":"0.99937","date":"2026-10-31"},{"cve":"CVE-2020-1956","epss":"0.97389","percentile":"0.99898","date":"2026-10-31"},{"cve":"CVE-2020-24363","epss":"0.22187","percentile":"0.97675","date":"2026-10-31"},{"cve":"CVE-2020-24557","epss":"0.02666","percentile":"0.85731","date":"2026-10-31"},{"cve":"CVE-2020-25078","epss":"0.97511","percentile":"0.999","date":"2026-10-31"},{"cve":"CVE-2020-25079","epss":"0.54007","percentile":"0.99004","date":"2026-10-31"},{"cve":"CVE-2020-25213","epss":"0.97328","percentile":"0.99897","date":"2026-10-31"},{"cve":"CVE-2020-25223","epss":"0.96753","percentile":"0.99886","date":"2026-10-31"},{"cve":"CVE-2020-25506","epss":"0.99968","percentile":"0.99977","date":"2026-10-31"},{"cve":"CVE-2020-26919","epss":"0.57468","percentile":"0.9908","date":"2026-10-31"},{"cve":"CVE-2020-27930","epss":"0.22009","percentile":"0.97661","date":"2026-10-31"},{"cve":"CVE-2020-27932","epss":"0.10337","percentile":"0.9571","date":"2026-10-31"},{"cve":"CVE-2020-27950","epss":"0.1652","percentile":"0.96998","date":"2026-10-31"},{"cve":"CVE-2020-28949","epss":"0.84554","percentile":"0.99702","date":"2026-10-31"},{"cve":"CVE-2020-29557","epss":"0.55747","percentile":"0.99041","date":"2026-10-31"},{"cve":"CVE-2020-29574","epss":"0.04696","percentile":"0.91799","date":"2026-10-31"},{"cve":"CVE-2020-29583","epss":"0.90155","percentile":"0.99797","date":"2026-10-31"},{"cve":"CVE-2020-2021","epss":"0.04362","percentile":"0.91251","date":"2026-10-31"},{"cve":"CVE-2020-2506","epss":"0.02006","percentile":"0.80824","date":"2026-10-31"},{"cve":"CVE-2020-2509","epss":"0.33987","percentile":"0.98395","date":"2026-10-31"},{"cve":"CVE-2020-2551","epss":"0.92817","percentile":"0.99829","date":"2026-10-31"},{"cve":"CVE-2020-2555","epss":"0.97116","percentile":"0.99893","date":"2026-10-31"},{"cve":"CVE-2020-2883","epss":"0.94582","percentile":"0.99855","date":"2026-10-31"},{"cve":"CVE-2020-35730","epss":"0.3292","percentile":"0.98356","date":"2026-10-31"},{"cve":"CVE-2020-36193","epss":"0.70595","percentile":"0.99391","date":"2026-10-31"},{"cve":"CVE-2020-3118","epss":"0.11685","percentile":"0.9606","date":"2026-10-31"},{"cve":"CVE-2020-3153","epss":"0.28515","percentile":"0.98129","date":"2026-10-31"},{"cve":"CVE-2020-3161","epss":"0.83855","percentile":"0.9969","date":"2026-10-31"},{"cve":"CVE-2020-3259","epss":"0.715","percentile":"0.99416","date":"2026-10-31"},{"cve":"CVE-2020-3433","epss":"0.10049","percentile":"0.95621","date":"2026-10-31"},{"cve":"CVE-2020-3452","epss":"0.99992","percentile":"0.99986","date":"2026-10-31"},{"cve":"CVE-2020-3566","epss":"0.03702","percentile":"0.89738","date":"2026-10-31"},{"cve":"CVE-2020-3569","epss":"0.0332","percentile":"0.88587","date":"2026-10-31"},{"cve":"CVE-2020-3580","epss":"0.85575","percentile":"0.99724","date":"2026-10-31"},{"cve":"CVE-2020-3837","epss":"0.14774","percentile":"0.96681","date":"2026-10-31"},{"cve":"CVE-2020-3950","epss":"0.07254","percentile":"0.94343","date":"2026-10-31"},{"cve":"CVE-2020-3952","epss":"0.90384","percentile":"0.99799","date":"2026-10-31"},{"cve":"CVE-2020-3992","epss":"0.83015","percentile":"0.99674","date":"2026-10-31"},{"cve":"CVE-2020-4006","epss":"0.17302","percentile":"0.97108","date":"2026-10-31"},{"cve":"CVE-2020-4427","epss":"0.70031","percentile":"0.99375","date":"2026-10-31"},{"cve":"CVE-2020-4428","epss":"0.61692","percentile":"0.9917","date":"2026-10-31"},{"cve":"CVE-2020-4430","epss":"0.68544","percentile":"0.99337","date":"2026-10-31"},{"cve":"CVE-2020-5135","epss":"0.26869","percentile":"0.98036","date":"2026-10-31"},{"cve":"CVE-2020-5410","epss":"0.95586","percentile":"0.9987","date":"2026-10-31"},{"cve":"CVE-2020-5722","epss":"0.84287","percentile":"0.99698","date":"2026-10-31"},{"cve":"CVE-2020-5735","epss":"0.36217","percentile":"0.98478","date":"2026-10-31"},{"cve":"CVE-2020-5741","epss":"0.72936","percentile":"0.99451","date":"2026-10-31"},{"cve":"CVE-2020-5847","epss":"0.95844","percentile":"0.99873","date":"2026-10-31"},{"cve":"CVE-2020-5849","epss":"0.93243","percentile":"0.99835","date":"2026-10-31"},{"cve":"CVE-2020-5902","epss":"0.99999","percentile":"1.0","date":"2026-10-31"},{"cve":"CVE-2020-6207","epss":"0.98135","percentile":"0.99913","date":"2026-10-31"},{"cve":"CVE-2020-6287","epss":"0.94719","percentile":"0.99857","date":"2026-10-31"},{"cve":"CVE-2020-6418","epss":"0.78808","percentile":"0.9959","date":"2026-10-31"},{"cve":"CVE-2020-6572","epss":"0.10586","percentile":"0.95783","date":"2026-10-31"},{"cve":"CVE-2020-6819","epss":"0.03039","percentile":"0.87515","date":"2026-10-31"},{"cve":"CVE-2020-6820","epss":"0.07063","percentile":"0.94208","date":"2026-10-31"},{"cve":"CVE-2020-7247","epss":"0.98972","percentile":"0.9993","date":"2026-10-31"},{"cve":"CVE-2020-7796","epss":"0.93592","percentile":"0.99841","date":"2026-10-31"},{"cve":"CVE-2020-7961","epss":"0.99905","percentile":"0.99966","date":"2026-10-31"},{"cve":"CVE-2020-8193","epss":"0.88269","percentile":"0.99769","date":"2026-10-31"},{"cve":"CVE-2020-8195","epss":"0.33029","percentile":"0.98361","date":"2026-10-31"},{"cve":"CVE-2020-8196","epss":"0.26333","percentile":"0.98005","date":"2026-10-31"},{"cve":"CVE-2020-8218","epss":"0.3225","percentile":"0.98323","date":"2026-10-31"},{"cve":"CVE-2020-8243","epss":"0.90759","percentile":"0.99804","date":"2026-10-31"},{"cve":"CVE-2020-8260","epss":"0.9648","percentile":"0.99881","date":"2026-10-31"},{"cve":"CVE-2020-8467","epss":"0.109","percentile":"0.95873","date":"2026-10-31"},{"cve":"CVE-2020-8468","epss":"0.06165","percentile":"0.93482","date":"2026-10-31"},{"cve":"CVE-2020-8515","epss":"0.99993","percentile":"0.99987","date":"2026-10-31"},{"cve":"CVE-2020-8599","epss":"0.11858","percentile":"0.96096","date":"2026-10-31"},{"cve":"CVE-2020-8644","epss":"0.86689","percentile":"0.99741","date":"2026-10-31"},{"cve":"CVE-2020-8655","epss":"0.60075","percentile":"0.99133","date":"2026-10-31"},{"cve":"CVE-2020-8657","epss":"0.91874","percentile":"0.99817","date":"2026-10-31"},{"cve":"CVE-2020-8816","epss":"0.78336","percentile":"0.99581","date":"2026-10-31"},{"cve":"CVE-2020-9054","epss":"0.99988","percentile":"0.99984","date":"2026-10-31"},{"cve":"CVE-2020-9377","epss":"0.21888","percentile":"0.97648","date":"2026-10-31"},{"cve":"CVE-2020-9715","epss":"0.33491","percentile":"0.9838","date":"2026-10-31"},{"cve":"CVE-2020-9818","epss":"0.02344","percentile":"0.83649","date":"2026-10-31"},{"cve":"CVE-2020-9819","epss":"0.02232","percentile":"0.82769","date":"2026-10-31"},{"cve":"CVE-2020-9859","epss":"0.00829","percentile":"0.57543","date":"2026-10-31"},{"cve":"CVE-2020-9907","epss":"0.03199","percentile":"0.88126","date":"2026-10-31"},{"cve":"CVE-2020-9934","epss":"0.03208","percentile":"0.88165","date":"2026-10-31"},{"cve":"CVE-2021-0920","epss":"0.00867","percentile":"0.58745","date":"2026-10-31"},{"cve":"CVE-2021-1048","epss":"0.01058","percentile":"0.64486","date":"2026-10-31"},{"cve":"CVE-2021-1497","epss":"0.9993","percentile":"0.99969","date":"2026-10-31"},{"cve":"CVE-2021-1498","epss":"0.99999","percentile":"0.99991","date":"2026-10-31"},{"cve":"CVE-2021-1647","epss":"0.39653","percentile":"0.98618","date":"2026-10-31"},{"cve":"CVE-2021-1675","epss":"0.85305","percentile":"0.99716","date":"2026-10-31"},{"cve":"CVE-2021-1732","epss":"0.78376","percentile":"0.99582","date":"2026-10-31"},{"cve":"CVE-2021-1782","epss":"0.02222","percentile":"0.82692","date":"2026-10-31"},{"cve":"CVE-2021-1789","epss":"0.13975","percentile":"0.9655","date":"2026-10-31"},{"cve":"CVE-2021-1870","epss":"0.0771","percentile":"0.94611","date":"2026-10-31"},{"cve":"CVE-2021-1871","epss":"0.07002","percentile":"0.94165","date":"2026-10-31"},{"cve":"CVE-2021-1879","epss":"0.07082","percentile":"0.94223","date":"2026-10-31"},{"cve":"CVE-2021-1905","epss":"0.01543","percentile":"0.74965","date":"2026-10-31"},{"cve":"CVE-2021-1906","epss":"0.0052","percentile":"0.44182","date":"2026-10-31"},{"cve":"CVE-2021-20016","epss":"0.40038","percentile":"0.98631","date":"2026-10-31"},{"cve":"CVE-2021-20021","epss":"0.8878","percentile":"0.99776","date":"2026-10-31"},{"cve":"CVE-2021-20022","epss":"0.16639","percentile":"0.97021","date":"2026-10-31"},{"cve":"CVE-2021-20023","epss":"0.51689","percentile":"0.98947","date":"2026-10-31"},{"cve":"CVE-2021-20028","epss":"0.30084","percentile":"0.98214","date":"2026-10-31"},{"cve":"CVE-2021-20035","epss":"0.04406","percentile":"0.91331","date":"2026-10-31"},{"cve":"CVE-2021-20038","epss":"0.99912","percentile":"0.99967","date":"2026-10-31"},{"cve":"CVE-2021-20090","epss":"0.99982","percentile":"0.99982","date":"2026-10-31"},{"cve":"CVE-2021-20123","epss":"0.89654","percentile":"0.99788","date":"2026-10-31"},{"cve":"CVE-2021-20124","epss":"0.95917","percentile":"0.99874","date":"2026-10-31"},{"cve":"CVE-2021-21017","epss":"0.86326","percentile":"0.99734","date":"2026-10-31"},{"cve":"CVE-2021-21148","epss":"0.19968","percentile":"0.97436","date":"2026-10-31"},{"cve":"CVE-2021-21166","epss":"0.24027","percentile":"0.97844","date":"2026-10-31"},{"cve":"CVE-2021-21193","epss":"0.0995","percentile":"0.95595","date":"2026-10-31"},{"cve":"CVE-2021-21206","epss":"0.09307","percentile":"0.95373","date":"2026-10-31"},{"cve":"CVE-2021-21220","epss":"0.70435","percentile":"0.99388","date":"2026-10-31"},{"cve":"CVE-2021-21224","epss":"0.84173","percentile":"0.99695","date":"2026-10-31"},{"cve":"CVE-2021-21311","epss":"0.98464","percentile":"0.99919","date":"2026-10-31"},{"cve":"CVE-2021-21315","epss":"0.90675","percentile":"0.99803","date":"2026-10-31"},{"cve":"CVE-2021-21551","epss":"0.79628","percentile":"0.99606","date":"2026-10-31"},{"cve":"CVE-2021-21972","epss":"0.99865","percentile":"0.99962","date":"2026-10-31"},{"cve":"CVE-2021-21973","epss":"0.88012","percentile":"0.99764","date":"2026-10-31"},{"cve":"CVE-2021-21975","epss":"0.78001","percentile":"0.99574","date":"2026-10-31"},{"cve":"CVE-2021-21985","epss":"0.99999","percentile":"0.99992","date":"2026-10-31"},{"cve":"CVE-2021-22005","epss":"0.99999","percentile":"0.99997","date":"2026-10-31"},{"cve":"CVE-2021-22017","epss":"0.49177","percentile":"0.98885","date":"2026-10-31"},{"cve":"CVE-2021-22054","epss":"0.99677","percentile":"0.9995","date":"2026-10-31"},{"cve":"CVE-2021-22175","epss":"0.53372","percentile":"0.98987","date":"2026-10-31"},{"cve":"CVE-2021-22204","epss":"0.99981","percentile":"0.99981","date":"2026-10-31"},{"cve":"CVE-2021-22205","epss":"0.99731","percentile":"0.99953","date":"2026-10-31"},{"cve":"CVE-2021-22502","epss":"0.9674","percentile":"0.99886","date":"2026-10-31"},{"cve":"CVE-2021-22506","epss":"0.25695","percentile":"0.97966","date":"2026-10-31"},{"cve":"CVE-2021-22555","epss":"0.78684","percentile":"0.99588","date":"2026-10-31"},{"cve":"CVE-2021-22600","epss":"0.06586","percentile":"0.93839","date":"2026-10-31"},{"cve":"CVE-2021-22681","epss":"0.6363","percentile":"0.99215","date":"2026-10-31"},{"cve":"CVE-2021-22893","epss":"0.47172","percentile":"0.98836","date":"2026-10-31"},{"cve":"CVE-2021-22894","epss":"0.41284","percentile":"0.98668","date":"2026-10-31"},{"cve":"CVE-2021-22899","epss":"0.22915","percentile":"0.97745","date":"2026-10-31"},{"cve":"CVE-2021-22900","epss":"0.14146","percentile":"0.96576","date":"2026-10-31"},{"cve":"CVE-2021-22941","epss":"0.53585","percentile":"0.98993","date":"2026-10-31"},{"cve":"CVE-2021-22986","epss":"0.99898","percentile":"0.99965","date":"2026-10-31"},{"cve":"CVE-2021-22991","epss":"0.62421","percentile":"0.99185","date":"2026-10-31"},{"cve":"CVE-2021-23758","epss":"0.82578","percentile":"0.99665","date":"2026-10-31"},{"cve":"CVE-2021-23874","epss":"0.01026","percentile":"0.6362","date":"2026-10-31"},{"cve":"CVE-2021-25296","epss":"0.71935","percentile":"0.99428","date":"2026-10-31"},{"cve":"CVE-2021-25297","epss":"0.56659","percentile":"0.99062","date":"2026-10-31"},{"cve":"CVE-2021-25298","epss":"0.73641","percentile":"0.9947","date":"2026-10-31"},{"cve":"CVE-2021-25337","epss":"0.02807","percentile":"0.86503","date":"2026-10-31"},{"cve":"CVE-2021-25369","epss":"0.01079","percentile":"0.65074","date":"2026-10-31"},{"cve":"CVE-2021-25370","epss":"0.0089","percentile":"0.5937","date":"2026-10-31"},{"cve":"CVE-2021-25371","epss":"0.00802","percentile":"0.56652","date":"2026-10-31"},{"cve":"CVE-2021-25372","epss":"0.00804","percentile":"0.56753","date":"2026-10-31"},{"cve":"CVE-2021-25394","epss":"0.00401","percentile":"0.34407","date":"2026-10-31"},{"cve":"CVE-2021-25395","epss":"0.00366","percentile":"0.30519","date":"2026-10-31"},{"cve":"CVE-2021-25487","epss":"0.00635","percentile":"0.50448","date":"2026-10-31"},{"cve":"CVE-2021-25489","epss":"0.00531","percentile":"0.4488","date":"2026-10-31"},{"cve":"CVE-2021-26084","epss":"0.99999","percentile":"0.99993","date":"2026-10-31"},{"cve":"CVE-2021-26085","epss":"0.99937","percentile":"0.99971","date":"2026-10-31"},{"cve":"CVE-2021-26086","epss":"0.99999","percentile":"0.99993","date":"2026-10-31"},{"cve":"CVE-2021-26411","epss":"0.81667","percentile":"0.99642","date":"2026-10-31"},{"cve":"CVE-2021-26828","epss":"0.39096","percentile":"0.98595","date":"2026-10-31"},{"cve":"CVE-2021-26829","epss":"0.4805","percentile":"0.98857","date":"2026-10-31"},{"cve":"CVE-2021-26855","epss":"0.99996","percentile":"0.99988","date":"2026-10-31"},{"cve":"CVE-2021-26857","epss":"0.95762","percentile":"0.99871","date":"2026-10-31"},{"cve":"CVE-2021-26858","epss":"0.93651","percentile":"0.99843","date":"2026-10-31"},{"cve":"CVE-2021-27059","epss":"0.06076","percentile":"0.934","date":"2026-10-31"},{"cve":"CVE-2021-27065","epss":"0.99876","percentile":"0.99964","date":"2026-10-31"},{"cve":"CVE-2021-27085","epss":"0.05448","percentile":"0.92732","date":"2026-10-31"},{"cve":"CVE-2021-27101","epss":"0.05998","percentile":"0.93326","date":"2026-10-31"},{"cve":"CVE-2021-27102","epss":"0.03654","percentile":"0.89613","date":"2026-10-31"},{"cve":"CVE-2021-27103","epss":"0.11406","percentile":"0.95999","date":"2026-10-31"},{"cve":"CVE-2021-27104","epss":"0.56686","percentile":"0.99062","date":"2026-10-31"},{"cve":"CVE-2021-27137","epss":"0.03995","percentile":"0.90521","date":"2026-10-31"},{"cve":"CVE-2021-27561","epss":"0.82865","percentile":"0.99671","date":"2026-10-31"},{"cve":"CVE-2021-27562","epss":"0.0306","percentile":"0.87606","date":"2026-10-31"},{"cve":"CVE-2021-27852","epss":"0.30258","percentile":"0.98223","date":"2026-10-31"},{"cve":"CVE-2021-27860","epss":"0.3968","percentile":"0.98619","date":"2026-10-31"},{"cve":"CVE-2021-27876","epss":"0.13518","percentile":"0.96451","date":"2026-10-31"},{"cve":"CVE-2021-27877","epss":"0.6491","percentile":"0.99247","date":"2026-10-31"},{"cve":"CVE-2021-27878","epss":"0.23952","percentile":"0.97837","date":"2026-10-31"},{"cve":"CVE-2021-28310","epss":"0.08398","percentile":"0.94984","date":"2026-10-31"},{"cve":"CVE-2021-28550","epss":"0.51851","percentile":"0.9895","date":"2026-10-31"},{"cve":"CVE-2021-28663","epss":"0.12084","percentile":"0.96145","date":"2026-10-31"},{"cve":"CVE-2021-28664","epss":"0.05407","percentile":"0.92689","date":"2026-10-31"},{"cve":"CVE-2021-28799","epss":"0.7825","percentile":"0.99579","date":"2026-10-31"},{"cve":"CVE-2021-29256","epss":"0.02988","percentile":"0.87315","date":"2026-10-31"},{"cve":"CVE-2021-30116","epss":"0.85735","percentile":"0.99726","date":"2026-10-31"},{"cve":"CVE-2021-30533","epss":"0.16742","percentile":"0.97035","date":"2026-10-31"},{"cve":"CVE-2021-30551","epss":"0.64701","percentile":"0.99243","date":"2026-10-31"},{"cve":"CVE-2021-30554","epss":"0.07367","percentile":"0.94414","date":"2026-10-31"},{"cve":"CVE-2021-30563","epss":"0.09","percentile":"0.9527","date":"2026-10-31"},{"cve":"CVE-2021-30632","epss":"0.6319","percentile":"0.99204","date":"2026-10-31"},{"cve":"CVE-2021-30633","epss":"0.3318","percentile":"0.98366","date":"2026-10-31"},{"cve":"CVE-2021-30657","epss":"0.68531","percentile":"0.99337","date":"2026-10-31"},{"cve":"CVE-2021-30661","epss":"0.04491","percentile":"0.91484","date":"2026-10-31"},{"cve":"CVE-2021-30663","epss":"0.03521","percentile":"0.8923","date":"2026-10-31"},{"cve":"CVE-2021-30665","epss":"0.03706","percentile":"0.89746","date":"2026-10-31"},{"cve":"CVE-2021-30666","epss":"0.02998","percentile":"0.87355","date":"2026-10-31"},{"cve":"CVE-2021-30713","epss":"0.07038","percentile":"0.9419","date":"2026-10-31"},{"cve":"CVE-2021-30761","epss":"0.10545","percentile":"0.95772","date":"2026-10-31"},{"cve":"CVE-2021-30762","epss":"0.10986","percentile":"0.95898","date":"2026-10-31"},{"cve":"CVE-2021-30807","epss":"0.28839","percentile":"0.98149","date":"2026-10-31"},{"cve":"CVE-2021-30858","epss":"0.13379","percentile":"0.96419","date":"2026-10-31"},{"cve":"CVE-2021-30860","epss":"0.75994","percentile":"0.99529","date":"2026-10-31"},{"cve":"CVE-2021-30869","epss":"0.04169","percentile":"0.90897","date":"2026-10-31"},{"cve":"CVE-2021-30883","epss":"0.14721","percentile":"0.96674","date":"2026-10-31"},{"cve":"CVE-2021-30900","epss":"0.05204","percentile":"0.92486","date":"2026-10-31"},{"cve":"CVE-2021-30952","epss":"0.06964","percentile":"0.94129","date":"2026-10-31"},{"cve":"CVE-2021-30983","epss":"0.02923","percentile":"0.87051","date":"2026-10-31"},{"cve":"CVE-2021-31010","epss":"0.03673","percentile":"0.89664","date":"2026-10-31"},{"cve":"CVE-2021-31166","epss":"0.99867","percentile":"0.99963","date":"2026-10-31"},{"cve":"CVE-2021-31196","epss":"0.54056","percentile":"0.99005","date":"2026-10-31"},{"cve":"CVE-2021-31199","epss":"0.02954","percentile":"0.87182","date":"2026-10-31"},{"cve":"CVE-2021-31201","epss":"0.02617","percentile":"0.85444","date":"2026-10-31"},{"cve":"CVE-2021-31207","epss":"0.99782","percentile":"0.99955","date":"2026-10-31"},{"cve":"CVE-2021-31755","epss":"0.86511","percentile":"0.99738","date":"2026-10-31"},{"cve":"CVE-2021-31955","epss":"0.81107","percentile":"0.99633","date":"2026-10-31"},{"cve":"CVE-2021-31956","epss":"0.22273","percentile":"0.97683","date":"2026-10-31"},{"cve":"CVE-2021-31979","epss":"0.0454","percentile":"0.91568","date":"2026-10-31"},{"cve":"CVE-2021-32030","epss":"0.99393","percentile":"0.9994","date":"2026-10-31"},{"cve":"CVE-2021-32648","epss":"0.91219","percentile":"0.99809","date":"2026-10-31"},{"cve":"CVE-2021-33044","epss":"0.99989","percentile":"0.99984","date":"2026-10-31"},{"cve":"CVE-2021-33045","epss":"0.99593","percentile":"0.99947","date":"2026-10-31"},{"cve":"CVE-2021-33739","epss":"0.06555","percentile":"0.93813","date":"2026-10-31"},{"cve":"CVE-2021-33742","epss":"0.59407","percentile":"0.9912","date":"2026-10-31"},{"cve":"CVE-2021-33766","epss":"0.98176","percentile":"0.99914","date":"2026-10-31"},{"cve":"CVE-2021-33771","epss":"0.10172","percentile":"0.95661","date":"2026-10-31"},{"cve":"CVE-2021-34448","epss":"0.40062","percentile":"0.98633","date":"2026-10-31"},{"cve":"CVE-2021-34473","epss":"0.99999","percentile":"0.99996","date":"2026-10-31"},{"cve":"CVE-2021-34484","epss":"0.21827","percentile":"0.97642","date":"2026-10-31"},{"cve":"CVE-2021-34486","epss":"0.09328","percentile":"0.95381","date":"2026-10-31"},{"cve":"CVE-2021-34523","epss":"0.9999","percentile":"0.99985","date":"2026-10-31"},{"cve":"CVE-2021-34527","epss":"0.99792","percentile":"0.99956","date":"2026-10-31"},{"cve":"CVE-2021-35211","epss":"0.9116","percentile":"0.99809","date":"2026-10-31"},{"cve":"CVE-2021-35247","epss":"0.03672","percentile":"0.89662","date":"2026-10-31"},{"cve":"CVE-2021-35394","epss":"0.99877","percentile":"0.99964","date":"2026-10-31"},{"cve":"CVE-2021-35395","epss":"0.981","percentile":"0.99911","date":"2026-10-31"},{"cve":"CVE-2021-35464","epss":"0.99999","percentile":"0.99995","date":"2026-10-31"},{"cve":"CVE-2021-35587","epss":"0.96284","percentile":"0.99879","date":"2026-10-31"},{"cve":"CVE-2021-36260","epss":"0.99869","percentile":"0.99963","date":"2026-10-31"},{"cve":"CVE-2021-36380","epss":"0.97832","percentile":"0.99906","date":"2026-10-31"},{"cve":"CVE-2021-36741","epss":"0.04951","percentile":"0.9217","date":"2026-10-31"},{"cve":"CVE-2021-36742","epss":"0.01482","percentile":"0.73963","date":"2026-10-31"},{"cve":"CVE-2021-36934","epss":"0.67252","percentile":"0.99301","date":"2026-10-31"},{"cve":"CVE-2021-36942","epss":"0.66023","percentile":"0.99273","date":"2026-10-31"},{"cve":"CVE-2021-36948","epss":"0.2327","percentile":"0.97777","date":"2026-10-31"},{"cve":"CVE-2021-36955","epss":"0.04071","percentile":"0.90683","date":"2026-10-31"},{"cve":"CVE-2021-37415","epss":"0.99825","percentile":"0.9996","date":"2026-10-31"},{"cve":"CVE-2021-37973","epss":"0.11735","percentile":"0.9607","date":"2026-10-31"},{"cve":"CVE-2021-37975","epss":"0.34887","percentile":"0.98431","date":"2026-10-31"},{"cve":"CVE-2021-37976","epss":"0.19901","percentile":"0.97425","date":"2026-10-31"},{"cve":"CVE-2021-38000","epss":"0.04948","percentile":"0.92161","date":"2026-10-31"},{"cve":"CVE-2021-38003","epss":"0.38573","percentile":"0.98577","date":"2026-10-31"},{"cve":"CVE-2021-38163","epss":"0.36898","percentile":"0.98509","date":"2026-10-31"},{"cve":"CVE-2021-38406","epss":"0.76428","percentile":"0.99541","date":"2026-10-31"},{"cve":"CVE-2021-38645","epss":"0.02727","percentile":"0.86068","date":"2026-10-31"},{"cve":"CVE-2021-38646","epss":"0.07987","percentile":"0.94758","date":"2026-10-31"},{"cve":"CVE-2021-38647","epss":"0.99933","percentile":"0.9997","date":"2026-10-31"},{"cve":"CVE-2021-38648","epss":"0.11424","percentile":"0.96004","date":"2026-10-31"},{"cve":"CVE-2021-38649","epss":"0.02887","percentile":"0.86883","date":"2026-10-31"},{"cve":"CVE-2021-39144","epss":"0.98124","percentile":"0.99912","date":"2026-10-31"},{"cve":"CVE-2021-39226","epss":"0.99933","percentile":"0.9997","date":"2026-10-31"},{"cve":"CVE-2021-39793","epss":"0.00685","percentile":"0.52629","date":"2026-10-31"},{"cve":"CVE-2021-39935","epss":"0.3614","percentile":"0.98475","date":"2026-10-31"},{"cve":"CVE-2021-3129","epss":"0.99943","percentile":"0.99973","date":"2026-10-31"},{"cve":"CVE-2021-3156","epss":"0.99962","percentile":"0.99976","date":"2026-10-31"},{"cve":"CVE-2021-3199","epss":"0.30244","percentile":"0.98221","date":"2026-10-31"},{"cve":"CVE-2021-3493","epss":"0.49166","percentile":"0.98884","date":"2026-10-31"},{"cve":"CVE-2021-3560","epss":"0.23708","percentile":"0.97819","date":"2026-10-31"},{"cve":"CVE-2021-40407","epss":"0.47635","percentile":"0.98847","date":"2026-10-31"},{"cve":"CVE-2021-40438","epss":"0.99999","percentile":"0.99997","date":"2026-10-31"},{"cve":"CVE-2021-40444","epss":"0.9784","percentile":"0.99907","date":"2026-10-31"},{"cve":"CVE-2021-40449","epss":"0.81936","percentile":"0.99651","date":"2026-10-31"},{"cve":"CVE-2021-40450","epss":"0.01582","percentile":"0.75543","date":"2026-10-31"},{"cve":"CVE-2021-40539","epss":"0.9896","percentile":"0.99929","date":"2026-10-31"},{"cve":"CVE-2021-40655","epss":"0.87039","percentile":"0.99748","date":"2026-10-31"},{"cve":"CVE-2021-40870","epss":"0.93019","percentile":"0.99832","date":"2026-10-31"},{"cve":"CVE-2021-41277","epss":"0.97178","percentile":"0.99895","date":"2026-10-31"},{"cve":"CVE-2021-41357","epss":"0.01582","percentile":"0.75543","date":"2026-10-31"},{"cve":"CVE-2021-41379","epss":"0.19452","percentile":"0.9737","date":"2026-10-31"},{"cve":"CVE-2021-41773","epss":"0.99992","percentile":"0.99986","date":"2026-10-31"},{"cve":"CVE-2021-42013","epss":"0.99964","percentile":"0.99976","date":"2026-10-31"},{"cve":"CVE-2021-42237","epss":"0.97566","percentile":"0.99902","date":"2026-10-31"},{"cve":"CVE-2021-42258","epss":"0.75182","percentile":"0.99511","date":"2026-10-31"},{"cve":"CVE-2021-42278","epss":"0.73297","percentile":"0.9946","date":"2026-10-31"},{"cve":"CVE-2021-42287","epss":"0.7717","percentile":"0.99553","date":"2026-10-31"},{"cve":"CVE-2021-42292","epss":"0.43005","percentile":"0.98721","date":"2026-10-31"},{"cve":"CVE-2021-42321","epss":"0.91737","percentile":"0.99815","date":"2026-10-31"},{"cve":"CVE-2021-43226","epss":"0.03275","percentile":"0.88422","date":"2026-10-31"},{"cve":"CVE-2021-43798","epss":"0.88503","percentile":"0.99771","date":"2026-10-31"},{"cve":"CVE-2021-43890","epss":"0.11294","percentile":"0.95974","date":"2026-10-31"},{"cve":"CVE-2021-44026","epss":"0.69882","percentile":"0.99371","date":"2026-10-31"},{"cve":"CVE-2021-44077","epss":"0.93298","percentile":"0.99836","date":"2026-10-31"},{"cve":"CVE-2021-44168","epss":"0.00906","percentile":"0.59858","date":"2026-10-31"},{"cve":"CVE-2021-44207","epss":"0.17578","percentile":"0.97144","date":"2026-10-31"},{"cve":"CVE-2021-44228","epss":"0.99999","percentile":"1.0","date":"2026-10-31"},{"cve":"CVE-2021-44515","epss":"0.99871","percentile":"0.99963","date":"2026-10-31"},{"cve":"CVE-2021-44529","epss":"0.99105","percentile":"0.99933","date":"2026-10-31"},{"cve":"CVE-2021-45046","epss":"0.99977","percentile":"0.9998","date":"2026-10-31"},{"cve":"CVE-2021-45382","epss":"0.97836","percentile":"0.99907","date":"2026-10-31"},{"cve":"CVE-2021-4034","epss":"0.94921","percentile":"0.9986","date":"2026-10-31"},{"cve":"CVE-2021-4102","epss":"0.07836","percentile":"0.94679","date":"2026-10-31"},{"cve":"CVE-2022-0028","epss":"0.0269","percentile":"0.85877","date":"2026-10-31"},{"cve":"CVE-2022-0185","epss":"0.25151","percentile":"0.97933","date":"2026-10-31"},{"cve":"CVE-2022-0492","epss":"0.05528","percentile":"0.92813","date":"2026-10-31"},{"cve":"CVE-2022-0543","epss":"0.99351","percentile":"0.99939","date":"2026-10-31"},{"cve":"CVE-2022-0609","epss":"0.22442","percentile":"0.97697","date":"2026-10-31"},{"cve":"CVE-2022-0847","epss":"0.92795","percentile":"0.99829","date":"2026-10-31"},{"cve":"CVE-2022-0995","epss":"0.08859","percentile":"0.95209","date":"2026-10-31"},{"cve":"CVE-2022-1040","epss":"0.99796","percentile":"0.99958","date":"2026-10-31"},{"cve":"CVE-2022-1096","epss":"0.24726","percentile":"0.97897","date":"2026-10-31"},{"cve":"CVE-2022-1364","epss":"0.13921","percentile":"0.96541","date":"2026-10-31"},{"cve":"CVE-2022-1388","epss":"0.99954","percentile":"0.99974","date":"2026-10-31"},{"cve":"CVE-2022-20699","epss":"0.72458","percentile":"0.9944","date":"2026-10-31"},{"cve":"CVE-2022-20700","epss":"0.05655","percentile":"0.9297","date":"2026-10-31"},{"cve":"CVE-2022-20701","epss":"0.09747","percentile":"0.95524","date":"2026-10-31"},{"cve":"CVE-2022-20703","epss":"0.09203","percentile":"0.95336","date":"2026-10-31"},{"cve":"CVE-2022-20708","epss":"0.14863","percentile":"0.96696","date":"2026-10-31"},{"cve":"CVE-2022-20775","epss":"0.12475","percentile":"0.96218","date":"2026-10-31"},{"cve":"CVE-2022-20821","epss":"0.11471","percentile":"0.96014","date":"2026-10-31"},{"cve":"CVE-2022-21445","epss":"0.62478","percentile":"0.99187","date":"2026-10-31"},{"cve":"CVE-2022-21587","epss":"0.98342","percentile":"0.99917","date":"2026-10-31"},{"cve":"CVE-2022-21882","epss":"0.59205","percentile":"0.99116","date":"2026-10-31"},{"cve":"CVE-2022-21919","epss":"0.02434","percentile":"0.84271","date":"2026-10-31"},{"cve":"CVE-2022-21971","epss":"0.53781","percentile":"0.98998","date":"2026-10-31"},{"cve":"CVE-2022-21999","epss":"0.41007","percentile":"0.9866","date":"2026-10-31"},{"cve":"CVE-2022-22047","epss":"0.18765","percentile":"0.97276","date":"2026-10-31"},{"cve":"CVE-2022-22071","epss":"0.00411","percentile":"0.35331","date":"2026-10-31"},{"cve":"CVE-2022-22265","epss":"0.00418","percentile":"0.36157","date":"2026-10-31"},{"cve":"CVE-2022-22536","epss":"0.97945","percentile":"0.99909","date":"2026-10-31"},{"cve":"CVE-2022-22587","epss":"0.11638","percentile":"0.96051","date":"2026-10-31"},{"cve":"CVE-2022-22620","epss":"0.16342","percentile":"0.96962","date":"2026-10-31"},{"cve":"CVE-2022-22674","epss":"0.01086","percentile":"0.65292","date":"2026-10-31"},{"cve":"CVE-2022-22675","epss":"0.12492","percentile":"0.96223","date":"2026-10-31"},{"cve":"CVE-2022-22706","epss":"0.01062","percentile":"0.64618","date":"2026-10-31"},{"cve":"CVE-2022-22718","epss":"0.18464","percentile":"0.97242","date":"2026-10-31"},{"cve":"CVE-2022-22947","epss":"0.98253","percentile":"0.99916","date":"2026-10-31"},{"cve":"CVE-2022-22948","epss":"0.13282","percentile":"0.96388","date":"2026-10-31"},{"cve":"CVE-2022-22954","epss":"0.99998","percentile":"0.99989","date":"2026-10-31"},{"cve":"CVE-2022-22960","epss":"0.35519","percentile":"0.98453","date":"2026-10-31"},{"cve":"CVE-2022-22963","epss":"0.99938","percentile":"0.99971","date":"2026-10-31"},{"cve":"CVE-2022-22965","epss":"0.99638","percentile":"0.9995","date":"2026-10-31"},{"cve":"CVE-2022-23131","epss":"0.95683","percentile":"0.99871","date":"2026-10-31"},{"cve":"CVE-2022-23134","epss":"0.9526","percentile":"0.99865","date":"2026-10-31"},{"cve":"CVE-2022-23176","epss":"0.10805","percentile":"0.95844","date":"2026-10-31"},{"cve":"CVE-2022-23227","epss":"0.48497","percentile":"0.98868","date":"2026-10-31"},{"cve":"CVE-2022-23748","epss":"0.08329","percentile":"0.94949","date":"2026-10-31"},{"cve":"CVE-2022-24086","epss":"0.99199","percentile":"0.99934","date":"2026-10-31"},{"cve":"CVE-2022-24112","epss":"0.96069","percentile":"0.99877","date":"2026-10-31"},{"cve":"CVE-2022-24521","epss":"0.07134","percentile":"0.94264","date":"2026-10-31"},{"cve":"CVE-2022-24682","epss":"0.30931","percentile":"0.98259","date":"2026-10-31"},{"cve":"CVE-2022-24706","epss":"0.9251","percentile":"0.99827","date":"2026-10-31"},{"cve":"CVE-2022-24816","epss":"0.99929","percentile":"0.99969","date":"2026-10-31"},{"cve":"CVE-2022-24990","epss":"0.83166","percentile":"0.99677","date":"2026-10-31"},{"cve":"CVE-2022-26134","epss":"0.99999","percentile":"0.99993","date":"2026-10-31"},{"cve":"CVE-2022-26138","epss":"0.98241","percentile":"0.99915","date":"2026-10-31"},{"cve":"CVE-2022-26143","epss":"0.87325","percentile":"0.99754","date":"2026-10-31"},{"cve":"CVE-2022-26258","epss":"0.91632","percentile":"0.99813","date":"2026-10-31"},{"cve":"CVE-2022-26318","epss":"0.78157","percentile":"0.99578","date":"2026-10-31"},{"cve":"CVE-2022-26352","epss":"0.91248","percentile":"0.9981","date":"2026-10-31"},{"cve":"CVE-2022-26485","epss":"0.14261","percentile":"0.96596","date":"2026-10-31"},{"cve":"CVE-2022-26486","epss":"0.02362","percentile":"0.83788","date":"2026-10-31"},{"cve":"CVE-2022-26500","epss":"0.05828","percentile":"0.93157","date":"2026-10-31"},{"cve":"CVE-2022-26501","epss":"0.04104","percentile":"0.90761","date":"2026-10-31"},{"cve":"CVE-2022-26871","epss":"0.19481","percentile":"0.97372","date":"2026-10-31"},{"cve":"CVE-2022-26904","epss":"0.16948","percentile":"0.97064","date":"2026-10-31"},{"cve":"CVE-2022-26923","epss":"0.835","percentile":"0.99684","date":"2026-10-31"},{"cve":"CVE-2022-26925","epss":"0.10476","percentile":"0.95754","date":"2026-10-31"},{"cve":"CVE-2022-27518","epss":"0.06858","percentile":"0.94047","date":"2026-10-31"},{"cve":"CVE-2022-27593","epss":"0.87908","percentile":"0.99762","date":"2026-10-31"},{"cve":"CVE-2022-27924","epss":"0.93908","percentile":"0.99844","date":"2026-10-31"},{"cve":"CVE-2022-27925","epss":"0.98676","percentile":"0.99924","date":"2026-10-31"},{"cve":"CVE-2022-27926","epss":"0.17634","percentile":"0.9715","date":"2026-10-31"},{"cve":"CVE-2022-28810","epss":"0.70966","percentile":"0.99403","date":"2026-10-31"},{"cve":"CVE-2022-29303","epss":"0.98039","percentile":"0.9991","date":"2026-10-31"},{"cve":"CVE-2022-29464","epss":"0.99999","percentile":"0.99992","date":"2026-10-31"},{"cve":"CVE-2022-29499","epss":"0.55242","percentile":"0.9903","date":"2026-10-31"},{"cve":"CVE-2022-2294","epss":"0.70833","percentile":"0.99399","date":"2026-10-31"},{"cve":"CVE-2022-2586","epss":"0.10202","percentile":"0.9567","date":"2026-10-31"},{"cve":"CVE-2022-2856","epss":"0.04561","percentile":"0.91601","date":"2026-10-31"},{"cve":"CVE-2022-30190","epss":"0.99163","percentile":"0.99934","date":"2026-10-31"},{"cve":"CVE-2022-30333","epss":"0.99233","percentile":"0.99936","date":"2026-10-31"},{"cve":"CVE-2022-30525","epss":"0.99944","percentile":"0.99973","date":"2026-10-31"},{"cve":"CVE-2022-31199","epss":"0.36009","percentile":"0.98472","date":"2026-10-31"},{"cve":"CVE-2022-32893","epss":"0.09931","percentile":"0.95591","date":"2026-10-31"},{"cve":"CVE-2022-32894","epss":"0.03286","percentile":"0.88466","date":"2026-10-31"},{"cve":"CVE-2022-32917","epss":"0.05603","percentile":"0.9291","date":"2026-10-31"},{"cve":"CVE-2022-33891","epss":"0.93244","percentile":"0.99835","date":"2026-10-31"},{"cve":"CVE-2022-34713","epss":"0.67757","percentile":"0.99316","date":"2026-10-31"},{"cve":"CVE-2022-35405","epss":"0.99873","percentile":"0.99963","date":"2026-10-31"},{"cve":"CVE-2022-35914","epss":"0.99851","percentile":"0.99961","date":"2026-10-31"},{"cve":"CVE-2022-36537","epss":"0.95397","percentile":"0.99868","date":"2026-10-31"},{"cve":"CVE-2022-36804","epss":"0.99077","percentile":"0.99933","date":"2026-10-31"},{"cve":"CVE-2022-37042","epss":"0.92072","percentile":"0.99821","date":"2026-10-31"},{"cve":"CVE-2022-37055","epss":"0.55531","percentile":"0.99036","date":"2026-10-31"},{"cve":"CVE-2022-37969","epss":"0.28483","percentile":"0.98127","date":"2026-10-31"},{"cve":"CVE-2022-38028","epss":"0.14949","percentile":"0.9671","date":"2026-10-31"},{"cve":"CVE-2022-38181","epss":"0.18461","percentile":"0.97241","date":"2026-10-31"},{"cve":"CVE-2022-39197","epss":"0.44145","percentile":"0.98755","date":"2026-10-31"},{"cve":"CVE-2022-3038","epss":"0.24925","percentile":"0.97914","date":"2026-10-31"},{"cve":"CVE-2022-3075","epss":"0.05846","percentile":"0.93177","date":"2026-10-31"},{"cve":"CVE-2022-3236","epss":"0.98905","percentile":"0.99927","date":"2026-10-31"},{"cve":"CVE-2022-3723","epss":"0.07921","percentile":"0.94726","date":"2026-10-31"},{"cve":"CVE-2022-40139","epss":"0.03439","percentile":"0.88972","date":"2026-10-31"},{"cve":"CVE-2022-40684","epss":"0.99984","percentile":"0.99983","date":"2026-10-31"},{"cve":"CVE-2022-40765","epss":"0.10566","percentile":"0.95779","date":"2026-10-31"},{"cve":"CVE-2022-40799","epss":"0.3365","percentile":"0.98385","date":"2026-10-31"},{"cve":"CVE-2022-41033","epss":"0.01886","percentile":"0.79517","date":"2026-10-31"},{"cve":"CVE-2022-41040","epss":"0.99956","percentile":"0.99975","date":"2026-10-31"},{"cve":"CVE-2022-41049","epss":"0.02634","percentile":"0.85544","date":"2026-10-31"},{"cve":"CVE-2022-41073","epss":"0.02362","percentile":"0.83785","date":"2026-10-31"},{"cve":"CVE-2022-41080","epss":"0.77326","percentile":"0.99557","date":"2026-10-31"},{"cve":"CVE-2022-41082","epss":"0.9997","percentile":"0.99977","date":"2026-10-31"},{"cve":"CVE-2022-41091","epss":"0.0191","percentile":"0.79788","date":"2026-10-31"},{"cve":"CVE-2022-41125","epss":"0.03046","percentile":"0.87539","date":"2026-10-31"},{"cve":"CVE-2022-41128","epss":"0.24623","percentile":"0.97886","date":"2026-10-31"},{"cve":"CVE-2022-41223","epss":"0.10657","percentile":"0.958","date":"2026-10-31"},{"cve":"CVE-2022-41328","epss":"0.10682","percentile":"0.95809","date":"2026-10-31"},{"cve":"CVE-2022-41352","epss":"0.95478","percentile":"0.99869","date":"2026-10-31"},{"cve":"CVE-2022-42475","epss":"0.99474","percentile":"0.99943","date":"2026-10-31"},{"cve":"CVE-2022-42827","epss":"0.01062","percentile":"0.64618","date":"2026-10-31"},{"cve":"CVE-2022-42856","epss":"0.08523","percentile":"0.95046","date":"2026-10-31"},{"cve":"CVE-2022-42948","epss":"0.02706","percentile":"0.85964","date":"2026-10-31"},{"cve":"CVE-2022-43769","epss":"0.9767","percentile":"0.99903","date":"2026-10-31"},{"cve":"CVE-2022-43939","epss":"0.92266","percentile":"0.99823","date":"2026-10-31"},{"cve":"CVE-2022-44698","epss":"0.76267","percentile":"0.99537","date":"2026-10-31"},{"cve":"CVE-2022-44877","epss":"0.99995","percentile":"0.99988","date":"2026-10-31"},{"cve":"CVE-2022-46169","epss":"0.99826","percentile":"0.99961","date":"2026-10-31"},{"cve":"CVE-2022-47966","epss":"0.99753","percentile":"0.99955","date":"2026-10-31"},{"cve":"CVE-2022-47986","epss":"0.99965","percentile":"0.99976","date":"2026-10-31"},{"cve":"CVE-2022-48503","epss":"0.03213","percentile":"0.88191","date":"2026-10-31"},{"cve":"CVE-2022-48618","epss":"0.00487","percentile":"0.41945","date":"2026-10-31"},{"cve":"CVE-2022-4135","epss":"0.31864","percentile":"0.98303","date":"2026-10-31"},{"cve":"CVE-2022-4262","epss":"0.2351","percentile":"0.97798","date":"2026-10-31"},{"cve":"CVE-2023-0266","epss":"0.03702","percentile":"0.8974","date":"2026-10-31"},{"cve":"CVE-2023-0386","epss":"0.0788","percentile":"0.94709","date":"2026-10-31"},{"cve":"CVE-2023-0669","epss":"0.99999","percentile":"0.99996","date":"2026-10-31"},{"cve":"CVE-2023-1177","epss":"0.6968","percentile":"0.99367","date":"2026-10-31"},{"cve":"CVE-2023-1389","epss":"0.99999","percentile":"0.99992","date":"2026-10-31"},{"cve":"CVE-2023-1671","epss":"0.99999","percentile":"0.99991","date":"2026-10-31"},{"cve":"CVE-2023-20109","epss":"0.02504","percentile":"0.84729","date":"2026-10-31"},{"cve":"CVE-2023-20118","epss":"0.54107","percentile":"0.99007","date":"2026-10-31"},{"cve":"CVE-2023-20198","epss":"0.99613","percentile":"0.99948","date":"2026-10-31"},{"cve":"CVE-2023-20269","epss":"0.26623","percentile":"0.9802","date":"2026-10-31"},{"cve":"CVE-2023-20273","epss":"0.92938","percentile":"0.99831","date":"2026-10-31"},{"cve":"CVE-2023-20867","epss":"0.13638","percentile":"0.96482","date":"2026-10-31"},{"cve":"CVE-2023-20887","epss":"0.98281","percentile":"0.99916","date":"2026-10-31"},{"cve":"CVE-2023-20963","epss":"0.01465","percentile":"0.73673","date":"2026-10-31"},{"cve":"CVE-2023-21237","epss":"0.00266","percentile":"0.18535","date":"2026-10-31"},{"cve":"CVE-2023-21492","epss":"0.02554","percentile":"0.85055","date":"2026-10-31"},{"cve":"CVE-2023-21529","epss":"0.59294","percentile":"0.99118","date":"2026-10-31"},{"cve":"CVE-2023-21608","epss":"0.59427","percentile":"0.99121","date":"2026-10-31"},{"cve":"CVE-2023-21674","epss":"0.34206","percentile":"0.98403","date":"2026-10-31"},{"cve":"CVE-2023-21715","epss":"0.12011","percentile":"0.96131","date":"2026-10-31"},{"cve":"CVE-2023-21823","epss":"0.05563","percentile":"0.92859","date":"2026-10-31"},{"cve":"CVE-2023-21839","epss":"0.999","percentile":"0.99966","date":"2026-10-31"},{"cve":"CVE-2023-22515","epss":"0.99223","percentile":"0.99936","date":"2026-10-31"},{"cve":"CVE-2023-22518","epss":"0.99999","percentile":"0.99996","date":"2026-10-31"},{"cve":"CVE-2023-22527","epss":"0.99984","percentile":"0.99982","date":"2026-10-31"},{"cve":"CVE-2023-22894","epss":"0.04114","percentile":"0.90781","date":"2026-10-31"},{"cve":"CVE-2023-22952","epss":"0.80139","percentile":"0.99617","date":"2026-10-31"},{"cve":"CVE-2023-23376","epss":"0.10853","percentile":"0.95856","date":"2026-10-31"},{"cve":"CVE-2023-23397","epss":"0.97159","percentile":"0.99894","date":"2026-10-31"},{"cve":"CVE-2023-23529","epss":"0.09426","percentile":"0.95417","date":"2026-10-31"},{"cve":"CVE-2023-23752","epss":"0.99809","percentile":"0.99958","date":"2026-10-31"},{"cve":"CVE-2023-24489","epss":"0.97343","percentile":"0.99897","date":"2026-10-31"},{"cve":"CVE-2023-24880","epss":"0.78005","percentile":"0.99574","date":"2026-10-31"},{"cve":"CVE-2023-24955","epss":"0.84974","percentile":"0.99712","date":"2026-10-31"},{"cve":"CVE-2023-25280","epss":"0.97864","percentile":"0.99908","date":"2026-10-31"},{"cve":"CVE-2023-25717","epss":"0.98069","percentile":"0.99911","date":"2026-10-31"},{"cve":"CVE-2023-26083","epss":"0.01218","percentile":"0.68633","date":"2026-10-31"},{"cve":"CVE-2023-26359","epss":"0.16988","percentile":"0.9707","date":"2026-10-31"},{"cve":"CVE-2023-26360","epss":"0.97339","percentile":"0.99897","date":"2026-10-31"},{"cve":"CVE-2023-26369","epss":"0.06746","percentile":"0.93964","date":"2026-10-31"},{"cve":"CVE-2023-27350","epss":"0.99999","percentile":"0.99994","date":"2026-10-31"},{"cve":"CVE-2023-27351","epss":"0.78052","percentile":"0.99576","date":"2026-10-31"},{"cve":"CVE-2023-27524","epss":"0.98148","percentile":"0.99913","date":"2026-10-31"},{"cve":"CVE-2023-27532","epss":"0.80599","percentile":"0.99625","date":"2026-10-31"},{"cve":"CVE-2023-27992","epss":"0.82264","percentile":"0.99659","date":"2026-10-31"},{"cve":"CVE-2023-27997","epss":"0.85689","percentile":"0.99726","date":"2026-10-31"},{"cve":"CVE-2023-28204","epss":"0.14292","percentile":"0.96602","date":"2026-10-31"},{"cve":"CVE-2023-28205","epss":"0.27076","percentile":"0.98048","date":"2026-10-31"},{"cve":"CVE-2023-28206","epss":"0.23215","percentile":"0.97772","date":"2026-10-31"},{"cve":"CVE-2023-28229","epss":"0.01671","percentile":"0.76813","date":"2026-10-31"},{"cve":"CVE-2023-28252","epss":"0.48892","percentile":"0.98878","date":"2026-10-31"},{"cve":"CVE-2023-28432","epss":"0.83957","percentile":"0.99693","date":"2026-10-31"},{"cve":"CVE-2023-28434","epss":"0.07917","percentile":"0.94724","date":"2026-10-31"},{"cve":"CVE-2023-28461","epss":"0.68079","percentile":"0.99325","date":"2026-10-31"},{"cve":"CVE-2023-28771","epss":"0.99284","percentile":"0.99937","date":"2026-10-31"},{"cve":"CVE-2023-29298","epss":"0.9979","percentile":"0.99956","date":"2026-10-31"},{"cve":"CVE-2023-29300","epss":"0.99991","percentile":"0.99985","date":"2026-10-31"},{"cve":"CVE-2023-29336","epss":"0.41185","percentile":"0.98666","date":"2026-10-31"},{"cve":"CVE-2023-29357","epss":"0.99984","percentile":"0.99983","date":"2026-10-31"},{"cve":"CVE-2023-29360","epss":"0.2162","percentile":"0.97627","date":"2026-10-31"},{"cve":"CVE-2023-29492","epss":"0.0269","percentile":"0.85877","date":"2026-10-31"},{"cve":"CVE-2023-29552","epss":"0.63975","percentile":"0.99224","date":"2026-10-31"},{"cve":"CVE-2023-2033","epss":"0.40798","percentile":"0.98654","date":"2026-10-31"},{"cve":"CVE-2023-2136","epss":"0.05786","percentile":"0.931","date":"2026-10-31"},{"cve":"CVE-2023-2533","epss":"0.28831","percentile":"0.98148","date":"2026-10-31"},{"cve":"CVE-2023-2868","epss":"0.86841","percentile":"0.99745","date":"2026-10-31"},{"cve":"CVE-2023-32046","epss":"0.09969","percentile":"0.956","date":"2026-10-31"},{"cve":"CVE-2023-32049","epss":"0.04156","percentile":"0.90873","date":"2026-10-31"},{"cve":"CVE-2023-32315","epss":"0.99999","percentile":"0.99992","date":"2026-10-31"},{"cve":"CVE-2023-32373","epss":"0.12172","percentile":"0.96159","date":"2026-10-31"},{"cve":"CVE-2023-32409","epss":"0.1653","percentile":"0.97004","date":"2026-10-31"},{"cve":"CVE-2023-32434","epss":"0.51517","percentile":"0.98943","date":"2026-10-31"},{"cve":"CVE-2023-32435","epss":"0.22951","percentile":"0.97748","date":"2026-10-31"},{"cve":"CVE-2023-32439","epss":"0.23968","percentile":"0.9784","date":"2026-10-31"},{"cve":"CVE-2023-33009","epss":"0.28144","percentile":"0.9811","date":"2026-10-31"},{"cve":"CVE-2023-33010","epss":"0.29024","percentile":"0.9816","date":"2026-10-31"},{"cve":"CVE-2023-33063","epss":"0.00672","percentile":"0.52096","date":"2026-10-31"},{"cve":"CVE-2023-33106","epss":"0.00788","percentile":"0.56213","date":"2026-10-31"},{"cve":"CVE-2023-33107","epss":"0.00739","percentile":"0.54581","date":"2026-10-31"},{"cve":"CVE-2023-33246","epss":"0.96568","percentile":"0.99882","date":"2026-10-31"},{"cve":"CVE-2023-33538","epss":"0.41606","percentile":"0.98682","date":"2026-10-31"},{"cve":"CVE-2023-34048","epss":"0.99234","percentile":"0.99937","date":"2026-10-31"},{"cve":"CVE-2023-34192","epss":"0.77266","percentile":"0.99556","date":"2026-10-31"},{"cve":"CVE-2023-34362","epss":"0.99934","percentile":"0.9997","date":"2026-10-31"},{"cve":"CVE-2023-35078","epss":"0.99999","percentile":"0.99998","date":"2026-10-31"},{"cve":"CVE-2023-35081","epss":"0.63577","percentile":"0.99214","date":"2026-10-31"},{"cve":"CVE-2023-35082","epss":"0.99999","percentile":"0.99995","date":"2026-10-31"},{"cve":"CVE-2023-35311","epss":"0.15522","percentile":"0.96813","date":"2026-10-31"},{"cve":"CVE-2023-35674","epss":"0.02636","percentile":"0.8556","date":"2026-10-31"},{"cve":"CVE-2023-36025","epss":"0.88085","percentile":"0.99765","date":"2026-10-31"},{"cve":"CVE-2023-36033","epss":"0.10945","percentile":"0.95887","date":"2026-10-31"},{"cve":"CVE-2023-36036","epss":"0.1667","percentile":"0.97025","date":"2026-10-31"},{"cve":"CVE-2023-36424","epss":"0.12087","percentile":"0.96145","date":"2026-10-31"},{"cve":"CVE-2023-36563","epss":"0.20318","percentile":"0.97477","date":"2026-10-31"},{"cve":"CVE-2023-36584","epss":"0.03251","percentile":"0.88335","date":"2026-10-31"},{"cve":"CVE-2023-36761","epss":"0.1957","percentile":"0.97382","date":"2026-10-31"},{"cve":"CVE-2023-36802","epss":"0.27909","percentile":"0.98099","date":"2026-10-31"},{"cve":"CVE-2023-36844","epss":"0.89958","percentile":"0.99793","date":"2026-10-31"},{"cve":"CVE-2023-36845","epss":"0.9507","percentile":"0.99862","date":"2026-10-31"},{"cve":"CVE-2023-36846","epss":"0.93473","percentile":"0.99839","date":"2026-10-31"},{"cve":"CVE-2023-36847","epss":"0.83455","percentile":"0.99683","date":"2026-10-31"},{"cve":"CVE-2023-36851","epss":"0.01123","percentile":"0.66255","date":"2026-10-31"},{"cve":"CVE-2023-36874","epss":"0.42564","percentile":"0.9871","date":"2026-10-31"},{"cve":"CVE-2023-36884","epss":"0.99439","percentile":"0.99942","date":"2026-10-31"},{"cve":"CVE-2023-37450","epss":"0.1895","percentile":"0.97301","date":"2026-10-31"},{"cve":"CVE-2023-37580","epss":"0.49083","percentile":"0.98883","date":"2026-10-31"},{"cve":"CVE-2023-38035","epss":"0.9995","percentile":"0.99974","date":"2026-10-31"},{"cve":"CVE-2023-38180","epss":"0.14127","percentile":"0.96574","date":"2026-10-31"},{"cve":"CVE-2023-38203","epss":"0.97074","percentile":"0.99892","date":"2026-10-31"},{"cve":"CVE-2023-38205","epss":"0.99764","percentile":"0.99955","date":"2026-10-31"},{"cve":"CVE-2023-38606","epss":"0.02899","percentile":"0.86944","date":"2026-10-31"},{"cve":"CVE-2023-38831","epss":"0.99815","percentile":"0.9996","date":"2026-10-31"},{"cve":"CVE-2023-38950","epss":"0.92468","percentile":"0.99825","date":"2026-10-31"},{"cve":"CVE-2023-39780","epss":"0.39514","percentile":"0.98612","date":"2026-10-31"},{"cve":"CVE-2023-3079","epss":"0.37858","percentile":"0.98546","date":"2026-10-31"},{"cve":"CVE-2023-3519","epss":"0.99749","percentile":"0.99954","date":"2026-10-31"},{"cve":"CVE-2023-40044","epss":"0.90355","percentile":"0.99799","date":"2026-10-31"},{"cve":"CVE-2023-41061","epss":"0.04409","percentile":"0.91334","date":"2026-10-31"},{"cve":"CVE-2023-41064","epss":"0.53403","percentile":"0.98988","date":"2026-10-31"},{"cve":"CVE-2023-41179","epss":"0.04216","percentile":"0.90992","date":"2026-10-31"},{"cve":"CVE-2023-41265","epss":"0.88215","percentile":"0.99767","date":"2026-10-31"},{"cve":"CVE-2023-41266","epss":"0.84843","percentile":"0.9971","date":"2026-10-31"},{"cve":"CVE-2023-41763","epss":"0.90547","percentile":"0.99801","date":"2026-10-31"},{"cve":"CVE-2023-41974","epss":"0.01955","percentile":"0.80266","date":"2026-10-31"},{"cve":"CVE-2023-41990","epss":"0.01388","percentile":"0.72273","date":"2026-10-31"},{"cve":"CVE-2023-41991","epss":"0.1338","percentile":"0.96419","date":"2026-10-31"},{"cve":"CVE-2023-41992","epss":"0.09515","percentile":"0.9545","date":"2026-10-31"},{"cve":"CVE-2023-41993","epss":"0.24349","percentile":"0.97866","date":"2026-10-31"},{"cve":"CVE-2023-42793","epss":"0.99987","percentile":"0.99983","date":"2026-10-31"},{"cve":"CVE-2023-42824","epss":"0.00971","percentile":"0.61923","date":"2026-10-31"},{"cve":"CVE-2023-42916","epss":"0.17823","percentile":"0.9717","date":"2026-10-31"},{"cve":"CVE-2023-42917","epss":"0.09295","percentile":"0.95369","date":"2026-10-31"},{"cve":"CVE-2023-43000","epss":"0.04042","percentile":"0.9062","date":"2026-10-31"},{"cve":"CVE-2023-43208","epss":"0.85886","percentile":"0.99728","date":"2026-10-31"},{"cve":"CVE-2023-43770","epss":"0.6366","percentile":"0.99216","date":"2026-10-31"},{"cve":"CVE-2023-44221","epss":"0.7625","percentile":"0.99537","date":"2026-10-31"},{"cve":"CVE-2023-44487","epss":"0.99999","percentile":"0.99998","date":"2026-10-31"},{"cve":"CVE-2023-45249","epss":"0.53255","percentile":"0.98983","date":"2026-10-31"},{"cve":"CVE-2023-45727","epss":"0.04822","percentile":"0.91979","date":"2026-10-31"},{"cve":"CVE-2023-46604","epss":"0.99992","percentile":"0.99986","date":"2026-10-31"},{"cve":"CVE-2023-46747","epss":"0.96715","percentile":"0.99885","date":"2026-10-31"},{"cve":"CVE-2023-46748","epss":"0.04262","percentile":"0.91073","date":"2026-10-31"},{"cve":"CVE-2023-46805","epss":"0.99984","percentile":"0.99982","date":"2026-10-31"},{"cve":"CVE-2023-47246","epss":"0.98851","percentile":"0.99927","date":"2026-10-31"},{"cve":"CVE-2023-47565","epss":"0.73277","percentile":"0.99459","date":"2026-10-31"},{"cve":"CVE-2023-48365","epss":"0.47733","percentile":"0.9885","date":"2026-10-31"},{"cve":"CVE-2023-48788","epss":"0.98446","percentile":"0.99918","date":"2026-10-31"},{"cve":"CVE-2023-49103","epss":"0.77755","percentile":"0.99569","date":"2026-10-31"},{"cve":"CVE-2023-49105","epss":"0.4319","percentile":"0.98725","date":"2026-10-31"},{"cve":"CVE-2023-49897","epss":"0.50447","percentile":"0.98913","date":"2026-10-31"},{"cve":"CVE-2023-4211","epss":"0.01098","percentile":"0.65648","date":"2026-10-31"},{"cve":"CVE-2023-4346","epss":"0.01363","percentile":"0.71792","date":"2026-10-31"},{"cve":"CVE-2023-4762","epss":"0.41375","percentile":"0.98672","date":"2026-10-31"},{"cve":"CVE-2023-4863","epss":"0.99979","percentile":"0.9998","date":"2026-10-31"},{"cve":"CVE-2023-4911","epss":"0.63769","percentile":"0.9922","date":"2026-10-31"},{"cve":"CVE-2023-4966","epss":"0.99999","percentile":"0.99997","date":"2026-10-31"},{"cve":"CVE-2023-50224","epss":"0.20021","percentile":"0.9744","date":"2026-10-31"},{"cve":"CVE-2023-52163","epss":"0.96921","percentile":"0.99888","date":"2026-10-31"},{"cve":"CVE-2023-5217","epss":"0.49013","percentile":"0.98881","date":"2026-10-31"},{"cve":"CVE-2023-5631","epss":"0.76337","percentile":"0.99539","date":"2026-10-31"},{"cve":"CVE-2023-6345","epss":"0.16468","percentile":"0.96987","date":"2026-10-31"},{"cve":"CVE-2023-6448","epss":"0.02089","percentile":"0.81607","date":"2026-10-31"},{"cve":"CVE-2023-6548","epss":"0.03191","percentile":"0.88099","date":"2026-10-31"},{"cve":"CVE-2023-6549","epss":"0.57633","percentile":"0.99083","date":"2026-10-31"},{"cve":"CVE-2023-7024","epss":"0.06671","percentile":"0.93892","date":"2026-10-31"},{"cve":"CVE-2023-7028","epss":"0.94458","percentile":"0.99852","date":"2026-10-31"},{"cve":"CVE-2023-7101","epss":"0.18959","percentile":"0.97301","date":"2026-10-31"},{"cve":"CVE-2024-0012","epss":"0.99787","percentile":"0.99956","date":"2026-10-31"},{"cve":"CVE-2024-0519","epss":"0.03802","percentile":"0.9001","date":"2026-10-31"},{"cve":"CVE-2024-0769","epss":"0.82714","percentile":"0.99668","date":"2026-10-31"},{"cve":"CVE-2024-11120","epss":"0.28386","percentile":"0.98123","date":"2026-10-31"},{"cve":"CVE-2024-11182","epss":"0.33259","percentile":"0.98369","date":"2026-10-31"},{"cve":"CVE-2024-11667","epss":"0.02929","percentile":"0.87078","date":"2026-10-31"},{"cve":"CVE-2024-11680","epss":"0.91849","percentile":"0.99816","date":"2026-10-31"},{"cve":"CVE-2024-12356","epss":"0.87432","percentile":"0.99756","date":"2026-10-31"},{"cve":"CVE-2024-12686","epss":"0.32575","percentile":"0.98339","date":"2026-10-31"},{"cve":"CVE-2024-12987","epss":"0.98163","percentile":"0.99913","date":"2026-10-31"},{"cve":"CVE-2024-13159","epss":"0.99993","percentile":"0.99986","date":"2026-10-31"},{"cve":"CVE-2024-13160","epss":"0.90985","percentile":"0.99807","date":"2026-10-31"},{"cve":"CVE-2024-13161","epss":"0.89809","percentile":"0.9979","date":"2026-10-31"},{"cve":"CVE-2024-1086","epss":"0.28058","percentile":"0.98107","date":"2026-10-31"},{"cve":"CVE-2024-1212","epss":"0.95388","percentile":"0.99868","date":"2026-10-31"},{"cve":"CVE-2024-1708","epss":"0.95436","percentile":"0.99869","date":"2026-10-31"},{"cve":"CVE-2024-1709","epss":"0.9998","percentile":"0.9998","date":"2026-10-31"},{"cve":"CVE-2024-20353","epss":"0.69824","percentile":"0.99369","date":"2026-10-31"},{"cve":"CVE-2024-20359","epss":"0.18816","percentile":"0.97281","date":"2026-10-31"},{"cve":"CVE-2024-20399","epss":"0.04306","percentile":"0.91152","date":"2026-10-31"},{"cve":"CVE-2024-20439","epss":"0.9709","percentile":"0.99893","date":"2026-10-31"},{"cve":"CVE-2024-20481","epss":"0.15874","percentile":"0.96887","date":"2026-10-31"},{"cve":"CVE-2024-20767","epss":"0.98514","percentile":"0.9992","date":"2026-10-31"},{"cve":"CVE-2024-20953","epss":"0.03934","percentile":"0.90382","date":"2026-10-31"},{"cve":"CVE-2024-21182","epss":"0.74162","percentile":"0.99485","date":"2026-10-31"},{"cve":"CVE-2024-21287","epss":"0.01723","percentile":"0.77504","date":"2026-10-31"},{"cve":"CVE-2024-21338","epss":"0.5981","percentile":"0.9913","date":"2026-10-31"},{"cve":"CVE-2024-21351","epss":"0.27798","percentile":"0.98093","date":"2026-10-31"},{"cve":"CVE-2024-21410","epss":"0.12661","percentile":"0.96253","date":"2026-10-31"},{"cve":"CVE-2024-21412","epss":"0.9941","percentile":"0.99942","date":"2026-10-31"},{"cve":"CVE-2024-21413","epss":"0.9466","percentile":"0.99856","date":"2026-10-31"},{"cve":"CVE-2024-21762","epss":"0.84589","percentile":"0.99703","date":"2026-10-31"},{"cve":"CVE-2024-21887","epss":"0.99999","percentile":"0.99999","date":"2026-10-31"},{"cve":"CVE-2024-21893","epss":"0.99999","percentile":"0.99999","date":"2026-10-31"},{"cve":"CVE-2024-23113","epss":"0.61725","percentile":"0.99171","date":"2026-10-31"},{"cve":"CVE-2024-23222","epss":"0.10593","percentile":"0.95784","date":"2026-10-31"},{"cve":"CVE-2024-23225","epss":"0.01481","percentile":"0.73942","date":"2026-10-31"},{"cve":"CVE-2024-23296","epss":"0.01411","percentile":"0.72686","date":"2026-10-31"},{"cve":"CVE-2024-23692","epss":"0.99485","percentile":"0.99944","date":"2026-10-31"},{"cve":"CVE-2024-23897","epss":"0.99999","percentile":"0.99995","date":"2026-10-31"},{"cve":"CVE-2024-24919","epss":"0.99978","percentile":"0.9998","date":"2026-10-31"},{"cve":"CVE-2024-26169","epss":"0.03981","percentile":"0.90491","date":"2026-10-31"},{"cve":"CVE-2024-27198","epss":"0.99938","percentile":"0.99971","date":"2026-10-31"},{"cve":"CVE-2024-27199","epss":"0.99991","percentile":"0.99985","date":"2026-10-31"},{"cve":"CVE-2024-27348","epss":"0.9921","percentile":"0.99935","date":"2026-10-31"},{"cve":"CVE-2024-27443","epss":"0.24606","percentile":"0.97884","date":"2026-10-31"},{"cve":"CVE-2024-28986","epss":"0.84628","percentile":"0.99705","date":"2026-10-31"},{"cve":"CVE-2024-28987","epss":"0.93299","percentile":"0.99836","date":"2026-10-31"},{"cve":"CVE-2024-28995","epss":"0.99614","percentile":"0.99949","date":"2026-10-31"},{"cve":"CVE-2024-29059","epss":"0.98624","percentile":"0.99923","date":"2026-10-31"},{"cve":"CVE-2024-29745","epss":"0.00486","percentile":"0.41907","date":"2026-10-31"},{"cve":"CVE-2024-29748","epss":"0.00676","percentile":"0.52246","date":"2026-10-31"},{"cve":"CVE-2024-29824","epss":"0.99938","percentile":"0.99972","date":"2026-10-31"},{"cve":"CVE-2024-29988","epss":"0.45151","percentile":"0.98784","date":"2026-10-31"},{"cve":"CVE-2024-30040","epss":"0.03939","percentile":"0.90391","date":"2026-10-31"},{"cve":"CVE-2024-30051","epss":"0.05687","percentile":"0.92997","date":"2026-10-31"},{"cve":"CVE-2024-30088","epss":"0.68202","percentile":"0.99329","date":"2026-10-31"},{"cve":"CVE-2024-32113","epss":"0.99916","percentile":"0.99968","date":"2026-10-31"},{"cve":"CVE-2024-32896","epss":"0.02985","percentile":"0.87304","date":"2026-10-31"},{"cve":"CVE-2024-34102","epss":"0.99994","percentile":"0.99987","date":"2026-10-31"},{"cve":"CVE-2024-35250","epss":"0.25222","percentile":"0.97936","date":"2026-10-31"},{"cve":"CVE-2024-36401","epss":"0.99813","percentile":"0.99959","date":"2026-10-31"},{"cve":"CVE-2024-36971","epss":"0.02701","percentile":"0.85936","date":"2026-10-31"},{"cve":"CVE-2024-37079","epss":"0.22377","percentile":"0.97693","date":"2026-10-31"},{"cve":"CVE-2024-37085","epss":"0.2677","percentile":"0.9803","date":"2026-10-31"},{"cve":"CVE-2024-37383","epss":"0.73995","percentile":"0.99481","date":"2026-10-31"},{"cve":"CVE-2024-38014","epss":"0.06263","percentile":"0.9357","date":"2026-10-31"},{"cve":"CVE-2024-38080","epss":"0.07058","percentile":"0.94205","date":"2026-10-31"},{"cve":"CVE-2024-38094","epss":"0.50892","percentile":"0.98926","date":"2026-10-31"},{"cve":"CVE-2024-38106","epss":"0.06337","percentile":"0.93631","date":"2026-10-31"},{"cve":"CVE-2024-38107","epss":"0.01635","percentile":"0.76298","date":"2026-10-31"},{"cve":"CVE-2024-38112","epss":"0.84225","percentile":"0.99696","date":"2026-10-31"},{"cve":"CVE-2024-38178","epss":"0.4138","percentile":"0.98672","date":"2026-10-31"},{"cve":"CVE-2024-38189","epss":"0.08194","percentile":"0.94872","date":"2026-10-31"},{"cve":"CVE-2024-38193","epss":"0.28739","percentile":"0.98141","date":"2026-10-31"},{"cve":"CVE-2024-38213","epss":"0.13626","percentile":"0.96478","date":"2026-10-31"},{"cve":"CVE-2024-38217","epss":"0.10026","percentile":"0.95616","date":"2026-10-31"},{"cve":"CVE-2024-38226","epss":"0.02667","percentile":"0.85737","date":"2026-10-31"},{"cve":"CVE-2024-38475","epss":"0.99957","percentile":"0.99975","date":"2026-10-31"},{"cve":"CVE-2024-38812","epss":"0.54571","percentile":"0.99017","date":"2026-10-31"},{"cve":"CVE-2024-38813","epss":"0.17355","percentile":"0.97115","date":"2026-10-31"},{"cve":"CVE-2024-38856","epss":"0.99427","percentile":"0.99942","date":"2026-10-31"},{"cve":"CVE-2024-39717","epss":"0.03987","percentile":"0.90504","date":"2026-10-31"},{"cve":"CVE-2024-39891","epss":"0.01669","percentile":"0.76782","date":"2026-10-31"},{"cve":"CVE-2024-3272","epss":"0.98109","percentile":"0.99912","date":"2026-10-31"},{"cve":"CVE-2024-3273","epss":"0.99995","percentile":"0.99988","date":"2026-10-31"},{"cve":"CVE-2024-3393","epss":"0.2912","percentile":"0.98166","date":"2026-10-31"},{"cve":"CVE-2024-3400","epss":"0.99999","percentile":"1.0","date":"2026-10-31"},{"cve":"CVE-2024-40711","epss":"0.90369","percentile":"0.99799","date":"2026-10-31"},{"cve":"CVE-2024-40766","epss":"0.18379","percentile":"0.97229","date":"2026-10-31"},{"cve":"CVE-2024-40890","epss":"0.20703","percentile":"0.97532","date":"2026-10-31"},{"cve":"CVE-2024-40891","epss":"0.22888","percentile":"0.97741","date":"2026-10-31"},{"cve":"CVE-2024-41710","epss":"0.41646","percentile":"0.98683","date":"2026-10-31"},{"cve":"CVE-2024-41713","epss":"0.97209","percentile":"0.99895","date":"2026-10-31"},{"cve":"CVE-2024-42009","epss":"0.82882","percentile":"0.99671","date":"2026-10-31"},{"cve":"CVE-2024-43047","epss":"0.00674","percentile":"0.52164","date":"2026-10-31"},{"cve":"CVE-2024-43093","epss":"0.00709","percentile":"0.53521","date":"2026-10-31"},{"cve":"CVE-2024-43451","epss":"0.84266","percentile":"0.99697","date":"2026-10-31"},{"cve":"CVE-2024-43461","epss":"0.54486","percentile":"0.99015","date":"2026-10-31"},{"cve":"CVE-2024-43468","epss":"0.81043","percentile":"0.99632","date":"2026-10-31"},{"cve":"CVE-2024-43572","epss":"0.66695","percentile":"0.99289","date":"2026-10-31"},{"cve":"CVE-2024-43573","epss":"0.46109","percentile":"0.98811","date":"2026-10-31"},{"cve":"CVE-2024-44308","epss":"0.09852","percentile":"0.95562","date":"2026-10-31"},{"cve":"CVE-2024-44309","epss":"0.21948","percentile":"0.97654","date":"2026-10-31"},{"cve":"CVE-2024-45195","epss":"0.99983","percentile":"0.99982","date":"2026-10-31"},{"cve":"CVE-2024-45519","epss":"0.99907","percentile":"0.99967","date":"2026-10-31"},{"cve":"CVE-2024-47575","epss":"0.94766","percentile":"0.99858","date":"2026-10-31"},{"cve":"CVE-2024-48248","epss":"0.94356","percentile":"0.99851","date":"2026-10-31"},{"cve":"CVE-2024-49035","epss":"0.013","percentile":"0.70454","date":"2026-10-31"},{"cve":"CVE-2024-49039","epss":"0.14179","percentile":"0.96581","date":"2026-10-31"},{"cve":"CVE-2024-49138","epss":"0.26215","percentile":"0.97999","date":"2026-10-31"},{"cve":"CVE-2024-4040","epss":"0.99539","percentile":"0.99946","date":"2026-10-31"},{"cve":"CVE-2024-4358","epss":"0.97482","percentile":"0.99899","date":"2026-10-31"},{"cve":"CVE-2024-4577","epss":"0.99987","percentile":"0.99984","date":"2026-10-31"},{"cve":"CVE-2024-4610","epss":"0.00764","percentile":"0.55431","date":"2026-10-31"},{"cve":"CVE-2024-4671","epss":"0.08348","percentile":"0.94957","date":"2026-10-31"},{"cve":"CVE-2024-4761","epss":"0.11007","percentile":"0.95903","date":"2026-10-31"},{"cve":"CVE-2024-4879","epss":"0.99976","percentile":"0.99979","date":"2026-10-31"},{"cve":"CVE-2024-4885","epss":"0.99288","percentile":"0.99938","date":"2026-10-31"},{"cve":"CVE-2024-4947","epss":"0.15236","percentile":"0.96761","date":"2026-10-31"},{"cve":"CVE-2024-4978","epss":"0.26937","percentile":"0.98039","date":"2026-10-31"},{"cve":"CVE-2024-50302","epss":"0.00811","percentile":"0.56946","date":"2026-10-31"},{"cve":"CVE-2024-50603","epss":"0.98518","percentile":"0.99921","date":"2026-10-31"},{"cve":"CVE-2024-50623","epss":"0.98607","percentile":"0.99923","date":"2026-10-31"},{"cve":"CVE-2024-51378","epss":"0.94748","percentile":"0.99858","date":"2026-10-31"},{"cve":"CVE-2024-51567","epss":"0.84402","percentile":"0.997","date":"2026-10-31"},{"cve":"CVE-2024-53104","epss":"0.03395","percentile":"0.88824","date":"2026-10-31"},{"cve":"CVE-2024-53150","epss":"0.01354","percentile":"0.71593","date":"2026-10-31"},{"cve":"CVE-2024-53197","epss":"0.04117","percentile":"0.90786","date":"2026-10-31"},{"cve":"CVE-2024-53704","epss":"0.95314","percentile":"0.99866","date":"2026-10-31"},{"cve":"CVE-2024-54085","epss":"0.60747","percentile":"0.99149","date":"2026-10-31"},{"cve":"CVE-2024-55550","epss":"0.38155","percentile":"0.98559","date":"2026-10-31"},{"cve":"CVE-2024-55591","epss":"0.9435","percentile":"0.99851","date":"2026-10-31"},{"cve":"CVE-2024-55956","epss":"0.93968","percentile":"0.99845","date":"2026-10-31"},{"cve":"CVE-2024-56145","epss":"0.97482","percentile":"0.99899","date":"2026-10-31"},{"cve":"CVE-2024-57726","epss":"0.66414","percentile":"0.99282","date":"2026-10-31"},{"cve":"CVE-2024-57727","epss":"0.96833","percentile":"0.99887","date":"2026-10-31"},{"cve":"CVE-2024-57728","epss":"0.64468","percentile":"0.99236","date":"2026-10-31"},{"cve":"CVE-2024-57968","epss":"0.32284","percentile":"0.98324","date":"2026-10-31"},{"cve":"CVE-2024-58136","epss":"0.87757","percentile":"0.9976","date":"2026-10-31"},{"cve":"CVE-2024-5217","epss":"0.99628","percentile":"0.99949","date":"2026-10-31"},{"cve":"CVE-2024-5274","epss":"0.0773","percentile":"0.94622","date":"2026-10-31"},{"cve":"CVE-2024-5910","epss":"0.91684","percentile":"0.99814","date":"2026-10-31"},{"cve":"CVE-2024-6047","epss":"0.10072","percentile":"0.95631","date":"2026-10-31"},{"cve":"CVE-2024-6670","epss":"0.92907","percentile":"0.99831","date":"2026-10-31"},{"cve":"CVE-2024-7262","epss":"0.03058","percentile":"0.87598","date":"2026-10-31"},{"cve":"CVE-2024-7399","epss":"0.91941","percentile":"0.99819","date":"2026-10-31"},{"cve":"CVE-2024-7593","epss":"0.99999","percentile":"0.99991","date":"2026-10-31"},{"cve":"CVE-2024-7694","epss":"0.01792","percentile":"0.78393","date":"2026-10-31"},{"cve":"CVE-2024-7965","epss":"0.18528","percentile":"0.97249","date":"2026-10-31"},{"cve":"CVE-2024-7971","epss":"0.21009","percentile":"0.97569","date":"2026-10-31"},{"cve":"CVE-2024-8068","epss":"0.03481","percentile":"0.89111","date":"2026-10-31"},{"cve":"CVE-2024-8069","epss":"0.21089","percentile":"0.97578","date":"2026-10-31"},{"cve":"CVE-2024-8190","epss":"0.88535","percentile":"0.99773","date":"2026-10-31"},{"cve":"CVE-2024-8956","epss":"0.58787","percentile":"0.99106","date":"2026-10-31"},{"cve":"CVE-2024-8957","epss":"0.7984","percentile":"0.9961","date":"2026-10-31"},{"cve":"CVE-2024-8963","epss":"0.98607","percentile":"0.99922","date":"2026-10-31"},{"cve":"CVE-2024-9379","epss":"0.44268","percentile":"0.98759","date":"2026-10-31"},{"cve":"CVE-2024-9380","epss":"0.58323","percentile":"0.99096","date":"2026-10-31"},{"cve":"CVE-2024-9463","epss":"0.98546","percentile":"0.99922","date":"2026-10-31"},{"cve":"CVE-2024-9465","epss":"0.99626","percentile":"0.99949","date":"2026-10-31"},{"cve":"CVE-2024-9474","epss":"0.93767","percentile":"0.99843","date":"2026-10-31"},{"cve":"CVE-2024-9537","epss":"0.03826","percentile":"0.90081","date":"2026-10-31"},{"cve":"CVE-2024-9680","epss":"0.23184","percentile":"0.97769","date":"2026-10-31"},{"cve":"CVE-2025-0108","epss":"0.98455","percentile":"0.99919","date":"2026-10-31"},{"cve":"CVE-2025-0111","epss":"0.01999","percentile":"0.80747","date":"2026-10-31"},{"cve":"CVE-2025-0282","epss":"0.99981","percentile":"0.99981","date":"2026-10-31"},{"cve":"CVE-2025-0411","epss":"0.67071","percentile":"0.99298","date":"2026-10-31"},{"cve":"CVE-2025-0994","epss":"0.31309","percentile":"0.98277","date":"2026-10-31"},{"cve":"CVE-2025-10035","epss":"0.99823","percentile":"0.9996","date":"2026-10-31"},{"cve":"CVE-2025-10585","epss":"0.08974","percentile":"0.95259","date":"2026-10-31"},{"cve":"CVE-2025-11371","epss":"0.92137","percentile":"0.99821","date":"2026-10-31"},{"cve":"CVE-2025-11953","epss":"0.9398","percentile":"0.99846","date":"2026-10-31"},{"cve":"CVE-2025-12480","epss":"0.95748","percentile":"0.99871","date":"2026-10-31"},{"cve":"CVE-2025-13223","epss":"0.049","percentile":"0.92093","date":"2026-10-31"},{"cve":"CVE-2025-14174","epss":"0.55334","percentile":"0.99032","date":"2026-10-31"},{"cve":"CVE-2025-14611","epss":"0.53302","percentile":"0.98984","date":"2026-10-31"},{"cve":"CVE-2025-14733","epss":"0.29423","percentile":"0.9818","date":"2026-10-31"},{"cve":"CVE-2025-14847","epss":"0.83218","percentile":"0.99678","date":"2026-10-31"},{"cve":"CVE-2025-15556","epss":"0.01746","percentile":"0.77814","date":"2026-10-31"},{"cve":"CVE-2025-1316","epss":"0.74482","percentile":"0.99495","date":"2026-10-31"},{"cve":"CVE-2025-1976","epss":"0.0069","percentile":"0.52817","date":"2026-10-31"},{"cve":"CVE-2025-20281","epss":"0.97601","percentile":"0.99902","date":"2026-10-31"},{"cve":"CVE-2025-20333","epss":"0.71207","percentile":"0.99409","date":"2026-10-31"},{"cve":"CVE-2025-20337","epss":"0.74499","percentile":"0.99495","date":"2026-10-31"},{"cve":"CVE-2025-20352","epss":"0.41502","percentile":"0.98679","date":"2026-10-31"},{"cve":"CVE-2025-20362","epss":"0.87085","percentile":"0.99749","date":"2026-10-31"},{"cve":"CVE-2025-20393","epss":"0.32392","percentile":"0.9833","date":"2026-10-31"},{"cve":"CVE-2025-21042","epss":"0.35577","percentile":"0.98456","date":"2026-10-31"},{"cve":"CVE-2025-21043","epss":"0.02216","percentile":"0.82639","date":"2026-10-31"},{"cve":"CVE-2025-21333","epss":"0.10066","percentile":"0.95627","date":"2026-10-31"},{"cve":"CVE-2025-21334","epss":"0.01573","percentile":"0.75425","date":"2026-10-31"},{"cve":"CVE-2025-21335","epss":"0.01401","percentile":"0.72519","date":"2026-10-31"},{"cve":"CVE-2025-21391","epss":"0.02284","percentile":"0.83161","date":"2026-10-31"},{"cve":"CVE-2025-21418","epss":"0.02132","percentile":"0.81979","date":"2026-10-31"},{"cve":"CVE-2025-21479","epss":"0.00783","percentile":"0.56039","date":"2026-10-31"},{"cve":"CVE-2025-21480","epss":"0.00428","percentile":"0.37126","date":"2026-10-31"},{"cve":"CVE-2025-21590","epss":"0.01749","percentile":"0.77855","date":"2026-10-31"},{"cve":"CVE-2025-22224","epss":"0.01561","percentile":"0.75244","date":"2026-10-31"},{"cve":"CVE-2025-22225","epss":"0.01016","percentile":"0.63324","date":"2026-10-31"},{"cve":"CVE-2025-22226","epss":"0.01633","percentile":"0.7627","date":"2026-10-31"},{"cve":"CVE-2025-22457","epss":"0.99981","percentile":"0.99981","date":"2026-10-31"},{"cve":"CVE-2025-23006","epss":"0.26561","percentile":"0.98017","date":"2026-10-31"},{"cve":"CVE-2025-23209","epss":"0.21642","percentile":"0.97629","date":"2026-10-31"},{"cve":"CVE-2025-24016","epss":"0.9384","percentile":"0.99844","date":"2026-10-31"},{"cve":"CVE-2025-24054","epss":"0.6227","percentile":"0.99182","date":"2026-10-31"},{"cve":"CVE-2025-24085","epss":"0.1751","percentile":"0.97136","date":"2026-10-31"},{"cve":"CVE-2025-24200","epss":"0.04457","percentile":"0.9143","date":"2026-10-31"},{"cve":"CVE-2025-24201","epss":"0.03847","percentile":"0.90135","date":"2026-10-31"},{"cve":"CVE-2025-24472","epss":"0.07235","percentile":"0.94329","date":"2026-10-31"},{"cve":"CVE-2025-24813","epss":"0.99942","percentile":"0.99972","date":"2026-10-31"},{"cve":"CVE-2025-24893","epss":"0.99974","percentile":"0.99978","date":"2026-10-31"},{"cve":"CVE-2025-24983","epss":"0.0187","percentile":"0.79343","date":"2026-10-31"},{"cve":"CVE-2025-24984","epss":"0.01994","percentile":"0.80701","date":"2026-10-31"},{"cve":"CVE-2025-24985","epss":"0.0389","percentile":"0.90243","date":"2026-10-31"},{"cve":"CVE-2025-24989","epss":"0.01622","percentile":"0.76101","date":"2026-10-31"},{"cve":"CVE-2025-24990","epss":"0.06369","percentile":"0.93655","date":"2026-10-31"},{"cve":"CVE-2025-24991","epss":"0.02018","percentile":"0.80934","date":"2026-10-31"},{"cve":"CVE-2025-24993","epss":"0.02216","percentile":"0.82638","date":"2026-10-31"},{"cve":"CVE-2025-25181","epss":"0.55549","percentile":"0.99037","date":"2026-10-31"},{"cve":"CVE-2025-25249","epss":"0.03742","percentile":"0.89857","date":"2026-10-31"},{"cve":"CVE-2025-25257","epss":"0.99921","percentile":"0.99968","date":"2026-10-31"},{"cve":"CVE-2025-26399","epss":"0.9012","percentile":"0.99796","date":"2026-10-31"},{"cve":"CVE-2025-26633","epss":"0.30391","percentile":"0.98232","date":"2026-10-31"},{"cve":"CVE-2025-27038","epss":"0.01044","percentile":"0.64125","date":"2026-10-31"},{"cve":"CVE-2025-27363","epss":"0.27775","percentile":"0.98092","date":"2026-10-31"},{"cve":"CVE-2025-27915","epss":"0.04064","percentile":"0.90667","date":"2026-10-31"},{"cve":"CVE-2025-27920","epss":"0.01865","percentile":"0.7929","date":"2026-10-31"},{"cve":"CVE-2025-29635","epss":"0.87944","percentile":"0.99763","date":"2026-10-31"},{"cve":"CVE-2025-29824","epss":"0.19254","percentile":"0.97337","date":"2026-10-31"},{"cve":"CVE-2025-2746","epss":"0.74055","percentile":"0.99483","date":"2026-10-31"},{"cve":"CVE-2025-2747","epss":"0.97166","percentile":"0.99895","date":"2026-10-31"},{"cve":"CVE-2025-2749","epss":"0.04021","percentile":"0.90579","date":"2026-10-31"},{"cve":"CVE-2025-2775","epss":"0.42612","percentile":"0.98712","date":"2026-10-31"},{"cve":"CVE-2025-2776","epss":"0.64726","percentile":"0.99243","date":"2026-10-31"},{"cve":"CVE-2025-2783","epss":"0.09238","percentile":"0.95351","date":"2026-10-31"},{"cve":"CVE-2025-30066","epss":"0.72092","percentile":"0.99431","date":"2026-10-31"},{"cve":"CVE-2025-30154","epss":"0.02485","percentile":"0.8461","date":"2026-10-31"},{"cve":"CVE-2025-30397","epss":"0.27263","percentile":"0.98059","date":"2026-10-31"},{"cve":"CVE-2025-30400","epss":"0.01917","percentile":"0.79867","date":"2026-10-31"},{"cve":"CVE-2025-30406","epss":"0.94343","percentile":"0.99851","date":"2026-10-31"},{"cve":"CVE-2025-31125","epss":"0.74939","percentile":"0.99506","date":"2026-10-31"},{"cve":"CVE-2025-31161","epss":"0.99969","percentile":"0.99977","date":"2026-10-31"},{"cve":"CVE-2025-31200","epss":"0.20898","percentile":"0.97557","date":"2026-10-31"},{"cve":"CVE-2025-31201","epss":"0.13973","percentile":"0.96549","date":"2026-10-31"},{"cve":"CVE-2025-31277","epss":"0.01678","percentile":"0.76909","date":"2026-10-31"},{"cve":"CVE-2025-31324","epss":"0.99486","percentile":"0.99945","date":"2026-10-31"},{"cve":"CVE-2025-32432","epss":"0.99792","percentile":"0.99957","date":"2026-10-31"},{"cve":"CVE-2025-32433","epss":"0.98924","percentile":"0.99928","date":"2026-10-31"},{"cve":"CVE-2025-32463","epss":"0.55498","percentile":"0.99036","date":"2026-10-31"},{"cve":"CVE-2025-32701","epss":"0.01416","percentile":"0.72763","date":"2026-10-31"},{"cve":"CVE-2025-32706","epss":"0.02333","percentile":"0.83564","date":"2026-10-31"},{"cve":"CVE-2025-32709","epss":"0.01818","percentile":"0.78717","date":"2026-10-31"},{"cve":"CVE-2025-32756","epss":"0.30944","percentile":"0.98259","date":"2026-10-31"},{"cve":"CVE-2025-32975","epss":"0.02487","percentile":"0.84625","date":"2026-10-31"},{"cve":"CVE-2025-33053","epss":"0.87015","percentile":"0.99747","date":"2026-10-31"},{"cve":"CVE-2025-33073","epss":"0.82699","percentile":"0.99667","date":"2026-10-31"},{"cve":"CVE-2025-34026","epss":"0.8178","percentile":"0.99645","date":"2026-10-31"},{"cve":"CVE-2025-34028","epss":"0.97604","percentile":"0.99902","date":"2026-10-31"},{"cve":"CVE-2025-34291","epss":"0.92808","percentile":"0.99829","date":"2026-10-31"},{"cve":"CVE-2025-35939","epss":"0.01349","percentile":"0.71494","date":"2026-10-31"},{"cve":"CVE-2025-37164","epss":"0.90193","percentile":"0.99797","date":"2026-10-31"},{"cve":"CVE-2025-38352","epss":"0.01357","percentile":"0.71671","date":"2026-10-31"},{"cve":"CVE-2025-39682","epss":"0.03252","percentile":"0.88342","date":"2026-10-31"},{"cve":"CVE-2025-39964","epss":"0.0157","percentile":"0.75377","date":"2026-10-31"},{"cve":"CVE-2025-3248","epss":"0.99993","percentile":"0.99987","date":"2026-10-31"},{"cve":"CVE-2025-3928","epss":"0.02527","percentile":"0.84892","date":"2026-10-31"},{"cve":"CVE-2025-3935","epss":"0.03597","percentile":"0.89453","date":"2026-10-31"},{"cve":"CVE-2025-40536","epss":"0.73562","percentile":"0.99467","date":"2026-10-31"},{"cve":"CVE-2025-40551","epss":"0.84181","percentile":"0.99696","date":"2026-10-31"},{"cve":"CVE-2025-40602","epss":"0.02756","percentile":"0.86246","date":"2026-10-31"},{"cve":"CVE-2025-41244","epss":"0.08629","percentile":"0.95101","date":"2026-10-31"},{"cve":"CVE-2025-42599","epss":"0.03355","percentile":"0.88703","date":"2026-10-31"},{"cve":"CVE-2025-42999","epss":"0.12854","percentile":"0.96297","date":"2026-10-31"},{"cve":"CVE-2025-43200","epss":"0.01191","percentile":"0.67971","date":"2026-10-31"},{"cve":"CVE-2025-43300","epss":"0.65159","percentile":"0.99253","date":"2026-10-31"},{"cve":"CVE-2025-43510","epss":"0.00355","percentile":"0.29286","date":"2026-10-31"},{"cve":"CVE-2025-43520","epss":"0.00425","percentile":"0.36824","date":"2026-10-31"},{"cve":"CVE-2025-43529","epss":"0.2565","percentile":"0.97963","date":"2026-10-31"},{"cve":"CVE-2025-47729","epss":"0.00447","percentile":"0.38858","date":"2026-10-31"},{"cve":"CVE-2025-47812","epss":"0.93884","percentile":"0.99844","date":"2026-10-31"},{"cve":"CVE-2025-47813","epss":"0.62512","percentile":"0.99188","date":"2026-10-31"},{"cve":"CVE-2025-47827","epss":"0.04927","percentile":"0.92132","date":"2026-10-31"},{"cve":"CVE-2025-48384","epss":"0.04379","percentile":"0.91285","date":"2026-10-31"},{"cve":"CVE-2025-48543","epss":"0.00634","percentile":"0.50413","date":"2026-10-31"},{"cve":"CVE-2025-48572","epss":"0.00259","percentile":"0.17639","date":"2026-10-31"},{"cve":"CVE-2025-48595","epss":"0.01947","percentile":"0.80192","date":"2026-10-31"},{"cve":"CVE-2025-48633","epss":"0.00262","percentile":"0.18046","date":"2026-10-31"},{"cve":"CVE-2025-48700","epss":"0.01713","percentile":"0.77385","date":"2026-10-31"},{"cve":"CVE-2025-48703","epss":"0.99655","percentile":"0.9995","date":"2026-10-31"},{"cve":"CVE-2025-48927","epss":"0.11567","percentile":"0.96034","date":"2026-10-31"},{"cve":"CVE-2025-48928","epss":"0.00577","percentile":"0.47562","date":"2026-10-31"},{"cve":"CVE-2025-49113","epss":"0.99491","percentile":"0.99945","date":"2026-10-31"},{"cve":"CVE-2025-49704","epss":"0.99995","percentile":"0.99988","date":"2026-10-31"},{"cve":"CVE-2025-49706","epss":"0.99057","percentile":"0.99932","date":"2026-10-31"},{"cve":"CVE-2025-4008","epss":"0.93315","percentile":"0.99837","date":"2026-10-31"},{"cve":"CVE-2025-4427","epss":"0.99927","percentile":"0.99969","date":"2026-10-31"},{"cve":"CVE-2025-4428","epss":"0.88003","percentile":"0.99764","date":"2026-10-31"},{"cve":"CVE-2025-4632","epss":"0.24066","percentile":"0.97846","date":"2026-10-31"},{"cve":"CVE-2025-52691","epss":"0.85655","percentile":"0.99725","date":"2026-10-31"},{"cve":"CVE-2025-53521","epss":"0.02295","percentile":"0.83261","date":"2026-10-31"},{"cve":"CVE-2025-53690","epss":"0.60601","percentile":"0.99145","date":"2026-10-31"},{"cve":"CVE-2025-53770","epss":"0.99999","percentile":"0.99991","date":"2026-10-31"},{"cve":"CVE-2025-54068","epss":"0.96284","percentile":"0.99879","date":"2026-10-31"},{"cve":"CVE-2025-54236","epss":"0.95353","percentile":"0.99867","date":"2026-10-31"},{"cve":"CVE-2025-54253","epss":"0.8877","percentile":"0.99775","date":"2026-10-31"},{"cve":"CVE-2025-54309","epss":"0.93473","percentile":"0.99839","date":"2026-10-31"},{"cve":"CVE-2025-54313","epss":"0.05125","percentile":"0.92393","date":"2026-10-31"},{"cve":"CVE-2025-54948","epss":"0.25402","percentile":"0.97947","date":"2026-10-31"},{"cve":"CVE-2025-55177","epss":"0.13513","percentile":"0.9645","date":"2026-10-31"},{"cve":"CVE-2025-55182","epss":"0.99802","percentile":"0.99958","date":"2026-10-31"},{"cve":"CVE-2025-57819","epss":"0.95213","percentile":"0.99865","date":"2026-10-31"},{"cve":"CVE-2025-58034","epss":"0.54724","percentile":"0.99021","date":"2026-10-31"},{"cve":"CVE-2025-58360","epss":"0.61169","percentile":"0.99161","date":"2026-10-31"},{"cve":"CVE-2025-59230","epss":"0.02657","percentile":"0.85677","date":"2026-10-31"},{"cve":"CVE-2025-59287","epss":"0.9998","percentile":"0.99981","date":"2026-10-31"},{"cve":"CVE-2025-59374","epss":"0.01197","percentile":"0.68113","date":"2026-10-31"},{"cve":"CVE-2025-59689","epss":"0.01956","percentile":"0.80276","date":"2026-10-31"},{"cve":"CVE-2025-59718","epss":"0.68293","percentile":"0.99331","date":"2026-10-31"},{"cve":"CVE-2025-5086","epss":"0.97039","percentile":"0.99891","date":"2026-10-31"},{"cve":"CVE-2025-5419","epss":"0.07486","percentile":"0.94478","date":"2026-10-31"},{"cve":"CVE-2025-5777","epss":"0.99972","percentile":"0.99978","date":"2026-10-31"},{"cve":"CVE-2025-60710","epss":"0.04614","percentile":"0.91687","date":"2026-10-31"},{"cve":"CVE-2025-61624","epss":"0.01343","percentile":"0.71369","date":"2026-10-31"},{"cve":"CVE-2025-61757","epss":"0.88647","percentile":"0.99774","date":"2026-10-31"},{"cve":"CVE-2025-61882","epss":"0.99728","percentile":"0.99953","date":"2026-10-31"},{"cve":"CVE-2025-61884","epss":"0.95891","percentile":"0.99873","date":"2026-10-31"},{"cve":"CVE-2025-61932","epss":"0.02768","percentile":"0.86311","date":"2026-10-31"},{"cve":"CVE-2025-62215","epss":"0.04464","percentile":"0.91442","date":"2026-10-31"},{"cve":"CVE-2025-62221","epss":"0.02505","percentile":"0.84731","date":"2026-10-31"},{"cve":"CVE-2025-62593","epss":"0.6015","percentile":"0.99135","date":"2026-10-31"},{"cve":"CVE-2025-64328","epss":"0.84618","percentile":"0.99704","date":"2026-10-31"},{"cve":"CVE-2025-64446","epss":"0.91078","percentile":"0.99808","date":"2026-10-31"},{"cve":"CVE-2025-66376","epss":"0.20227","percentile":"0.97466","date":"2026-10-31"},{"cve":"CVE-2025-66644","epss":"0.03415","percentile":"0.8889","date":"2026-10-31"},{"cve":"CVE-2025-67038","epss":"0.20286","percentile":"0.97474","date":"2026-10-31"},{"cve":"CVE-2025-68461","epss":"0.27407","percentile":"0.98067","date":"2026-10-31"},{"cve":"CVE-2025-68613","epss":"0.98994","percentile":"0.9993","date":"2026-10-31"},{"cve":"CVE-2025-68645","epss":"0.48873","percentile":"0.98877","date":"2026-10-31"},{"cve":"CVE-2025-68686","epss":"0.29499","percentile":"0.98185","date":"2026-10-31"},{"cve":"CVE-2025-6204","epss":"0.79551","percentile":"0.99604","date":"2026-10-31"},{"cve":"CVE-2025-6205","epss":"0.73672","percentile":"0.99472","date":"2026-10-31"},{"cve":"CVE-2025-6218","epss":"0.90479","percentile":"0.998","date":"2026-10-31"},{"cve":"CVE-2025-6543","epss":"0.10433","percentile":"0.95738","date":"2026-10-31"},{"cve":"CVE-2025-6554","epss":"0.14142","percentile":"0.96575","date":"2026-10-31"},{"cve":"CVE-2025-6558","epss":"0.10927","percentile":"0.9588","date":"2026-10-31"},{"cve":"CVE-2025-7775","epss":"0.2067","percentile":"0.97527","date":"2026-10-31"},{"cve":"CVE-2025-8088","epss":"0.94008","percentile":"0.99846","date":"2026-10-31"},{"cve":"CVE-2025-8110","epss":"0.85202","percentile":"0.99715","date":"2026-10-31"},{"cve":"CVE-2025-8875","epss":"0.02514","percentile":"0.848","date":"2026-10-31"},{"cve":"CVE-2025-8876","epss":"0.04125","percentile":"0.90815","date":"2026-10-31"},{"cve":"CVE-2025-9242","epss":"0.92219","percentile":"0.99822","date":"2026-10-31"},{"cve":"CVE-2025-9377","epss":"0.413","percentile":"0.98669","date":"2026-10-31"},{"cve":"CVE-2026-0257","epss":"0.95012","percentile":"0.99861","date":"2026-10-31"},{"cve":"CVE-2026-0300","epss":"0.41714","percentile":"0.98686","date":"2026-10-31"},{"cve":"CVE-2026-0322","epss":"0.0174","percentile":"0.77731","date":"2026-10-31"},{"cve":"CVE-2026-0770","epss":"0.62562","percentile":"0.99189","date":"2026-10-31"},{"cve":"CVE-2026-102489","epss":"0.22478","percentile":"0.97706","date":"2026-10-31"},{"cve":"CVE-2026-102490","epss":"0.10936","percentile":"0.95884","date":"2026-10-31"},{"cve":"CVE-2026-102764","epss":"0.1895","percentile":"0.97301","date":"2026-10-31"},{"cve":"CVE-2026-104286","epss":"0.04573","percentile":"0.91621","date":"2026-10-31"},{"cve":"CVE-2026-104935","epss":"0.86766","percentile":"0.99742","date":"2026-10-31"},{"cve":"CVE-2026-105133","epss":"0.7947","percentile":"0.99603","date":"2026-10-31"},{"cve":"CVE-2026-105134","epss":"0.81763","percentile":"0.99645","date":"2026-10-31"},{"cve":"CVE-2026-106931","epss":"0.02528","percentile":"0.84898","date":"2026-10-31"},{"cve":"CVE-2026-109618","epss":"0.99999","percentile":"0.99998","date":"2026-10-31"},{"cve":"CVE-2026-109619","epss":"0.99999","percentile":"0.99999","date":"2026-10-31"},{"cve":"CVE-2026-10520","epss":"0.99915","percentile":"0.99968","date":"2026-10-31"},{"cve":"CVE-2026-110447","epss":"0.73307","percentile":"0.99461","date":"2026-10-31"},{"cve":"CVE-2026-110936","epss":"0.00967","percentile":"0.61754","date":"2026-10-31"},{"cve":"CVE-2026-111357","epss":"0.00533","percentile":"0.45029","date":"2026-10-31"},{"cve":"CVE-2026-111497","epss":"0.82641","percentile":"0.99666","date":"2026-10-31"},{"cve":"CVE-2026-114625","epss":"0.01025","percentile":"0.63583","date":"2026-10-31"},{"cve":"CVE-2026-11645","epss":"0.0244","percentile":"0.84306","date":"2026-10-31"},{"cve":"CVE-2026-12569","epss":"0.46049","percentile":"0.9881","date":"2026-10-31"},{"cve":"CVE-2026-15409","epss":"0.06795","percentile":"0.94","date":"2026-10-31"},{"cve":"CVE-2026-15410","epss":"0.11791","percentile":"0.96082","date":"2026-10-31"},{"cve":"CVE-2026-16232","epss":"0.03517","percentile":"0.8922","date":"2026-10-31"},{"cve":"CVE-2026-16812","epss":"0.0176","percentile":"0.78","date":"2026-10-31"},{"cve":"CVE-2026-18556","epss":"0.07882","percentile":"0.94709","date":"2026-10-31"},{"cve":"CVE-2026-18577","epss":"0.14622","percentile":"0.96655","date":"2026-10-31"},{"cve":"CVE-2026-19490","epss":"0.32653","percentile":"0.98342","date":"2026-10-31"},{"cve":"CVE-2026-1281","epss":"0.98688","percentile":"0.99925","date":"2026-10-31"},{"cve":"CVE-2026-1340","epss":"0.98639","percentile":"0.99924","date":"2026-10-31"},{"cve":"CVE-2026-1603","epss":"0.88335","percentile":"0.9977","date":"2026-10-31"},{"cve":"CVE-2026-1731","epss":"0.931","percentile":"0.99834","date":"2026-10-31"},{"cve":"CVE-2026-20045","epss":"0.04541","percentile":"0.9157","date":"2026-10-31"},{"cve":"CVE-2026-20079","epss":"0.88658","percentile":"0.99774","date":"2026-10-31"},{"cve":"CVE-2026-20122","epss":"0.25801","percentile":"0.97975","date":"2026-10-31"},{"cve":"CVE-2026-20127","epss":"0.89294","percentile":"0.99782","date":"2026-10-31"},{"cve":"CVE-2026-20128","epss":"0.07317","percentile":"0.94382","date":"2026-10-31"},{"cve":"CVE-2026-20131","epss":"0.44431","percentile":"0.98764","date":"2026-10-31"},{"cve":"CVE-2026-20133","epss":"0.31479","percentile":"0.98284","date":"2026-10-31"},{"cve":"CVE-2026-20182","epss":"0.91817","percentile":"0.99816","date":"2026-10-31"},{"cve":"CVE-2026-20230","epss":"0.88528","percentile":"0.99772","date":"2026-10-31"},{"cve":"CVE-2026-20245","epss":"0.25323","percentile":"0.97943","date":"2026-10-31"},{"cve":"CVE-2026-20253","epss":"0.96939","percentile":"0.99888","date":"2026-10-31"},{"cve":"CVE-2026-20262","epss":"0.29116","percentile":"0.98166","date":"2026-10-31"},{"cve":"CVE-2026-20316","epss":"0.35096","percentile":"0.98437","date":"2026-10-31"},{"cve":"CVE-2026-20349","epss":"0.0101","percentile":"0.63155","date":"2026-10-31"},{"cve":"CVE-2026-20700","epss":"0.01679","percentile":"0.7692","date":"2026-10-31"},{"cve":"CVE-2026-20805","epss":"0.07463","percentile":"0.94464","date":"2026-10-31"},{"cve":"CVE-2026-20963","epss":"0.29201","percentile":"0.98171","date":"2026-10-31"},{"cve":"CVE-2026-21385","epss":"0.01316","percentile":"0.70767","date":"2026-10-31"},{"cve":"CVE-2026-21509","epss":"0.70795","percentile":"0.99399","date":"2026-10-31"},{"cve":"CVE-2026-21510","epss":"0.61238","percentile":"0.99162","date":"2026-10-31"},{"cve":"CVE-2026-21513","epss":"0.15852","percentile":"0.96883","date":"2026-10-31"},{"cve":"CVE-2026-21514","epss":"0.01587","percentile":"0.75615","date":"2026-10-31"},{"cve":"CVE-2026-21519","epss":"0.02477","percentile":"0.84559","date":"2026-10-31"},{"cve":"CVE-2026-21525","epss":"0.04865","percentile":"0.92042","date":"2026-10-31"},{"cve":"CVE-2026-21533","epss":"0.04182","percentile":"0.90926","date":"2026-10-31"},{"cve":"CVE-2026-21589","epss":"0.99477","percentile":"0.99943","date":"2026-10-31"},{"cve":"CVE-2026-21643","epss":"0.97735","percentile":"0.99904","date":"2026-10-31"},{"cve":"CVE-2026-21962","epss":"0.73192","percentile":"0.99457","date":"2026-10-31"},{"cve":"CVE-2026-22719","epss":"0.18321","percentile":"0.97224","date":"2026-10-31"},{"cve":"CVE-2026-22769","epss":"0.13525","percentile":"0.96453","date":"2026-10-31"},{"cve":"CVE-2026-23760","epss":"0.96432","percentile":"0.99881","date":"2026-10-31"},{"cve":"CVE-2026-24061","epss":"0.98984","percentile":"0.9993","date":"2026-10-31"},{"cve":"CVE-2026-24423","epss":"0.88177","percentile":"0.99767","date":"2026-10-31"},{"cve":"CVE-2026-24858","epss":"0.86592","percentile":"0.99739","date":"2026-10-31"},{"cve":"CVE-2026-25089","epss":"0.76112","percentile":"0.99532","date":"2026-10-31"},{"cve":"CVE-2026-25108","epss":"0.05249","percentile":"0.92538","date":"2026-10-31"},{"cve":"CVE-2026-28318","epss":"0.43651","percentile":"0.98742","date":"2026-10-31"},{"cve":"CVE-2026-2441","epss":"0.54957","percentile":"0.99026","date":"2026-10-31"},{"cve":"CVE-2026-31431","epss":"0.98114","percentile":"0.99912","date":"2026-10-31"},{"cve":"CVE-2026-32201","epss":"0.43378","percentile":"0.98732","date":"2026-10-31"},{"cve":"CVE-2026-32202","epss":"0.70902","percentile":"0.994","date":"2026-10-31"},{"cve":"CVE-2026-33017","epss":"0.96177","percentile":"0.99878","date":"2026-10-31"},{"cve":"CVE-2026-33634","epss":"0.59727","percentile":"0.99128","date":"2026-10-31"},{"cve":"CVE-2026-33824","epss":"0.77054","percentile":"0.99551","date":"2026-10-31"},{"cve":"CVE-2026-33825","epss":"0.06749","percentile":"0.93967","date":"2026-10-31"},{"cve":"CVE-2026-34197","epss":"0.98256","percentile":"0.99916","date":"2026-10-31"},{"cve":"CVE-2026-34486","epss":"0.98503","percentile":"0.9992","date":"2026-10-31"},{"cve":"CVE-2026-34621","epss":"0.0723","percentile":"0.94326","date":"2026-10-31"},{"cve":"CVE-2026-34908","epss":"0.88293","percentile":"0.99769","date":"2026-10-31"},{"cve":"CVE-2026-34909","epss":"0.68033","percentile":"0.99324","date":"2026-10-31"},{"cve":"CVE-2026-34910","epss":"0.90032","percentile":"0.99794","date":"2026-10-31"},{"cve":"CVE-2026-34926","epss":"0.1342","percentile":"0.96425","date":"2026-10-31"},{"cve":"CVE-2026-35273","epss":"0.96678","percentile":"0.99884","date":"2026-10-31"},{"cve":"CVE-2026-35616","epss":"0.93983","percentile":"0.99846","date":"2026-10-31"},{"cve":"CVE-2026-39808","epss":"0.93189","percentile":"0.99834","date":"2026-10-31"},{"cve":"CVE-2026-39987","epss":"0.99564","percentile":"0.99947","date":"2026-10-31"},{"cve":"CVE-2026-3055","epss":"0.91491","percentile":"0.99812","date":"2026-10-31"},{"cve":"CVE-2026-3502","epss":"0.05845","percentile":"0.93175","date":"2026-10-31"},{"cve":"CVE-2026-3909","epss":"0.02342","percentile":"0.83638","date":"2026-10-31"},{"cve":"CVE-2026-3910","epss":"0.02693","percentile":"0.85898","date":"2026-10-31"},{"cve":"CVE-2026-41091","epss":"0.08202","percentile":"0.94877","date":"2026-10-31"},{"cve":"CVE-2026-41709","epss":"0.00689","percentile":"0.52756","date":"2026-10-31"},{"cve":"CVE-2026-41940","epss":"0.98527","percentile":"0.99921","date":"2026-10-31"},{"cve":"CVE-2026-42016","epss":"0.08643","percentile":"0.9511","date":"2026-10-31"},{"cve":"CVE-2026-42018","epss":"0.09805","percentile":"0.95547","date":"2026-10-31"},{"cve":"CVE-2026-42208","epss":"0.8942","percentile":"0.99785","date":"2026-10-31"},{"cve":"CVE-2026-42271","epss":"0.91445","percentile":"0.99812","date":"2026-10-31"},{"cve":"CVE-2026-42897","epss":"0.70662","percentile":"0.99394","date":"2026-10-31"},{"cve":"CVE-2026-45247","epss":"0.26157","percentile":"0.97994","date":"2026-10-31"},{"cve":"CVE-2026-45321","epss":"0.03278","percentile":"0.88427","date":"2026-10-31"},{"cve":"CVE-2026-45498","epss":"0.63076","percentile":"0.99202","date":"2026-10-31"},{"cve":"CVE-2026-45659","epss":"0.80242","percentile":"0.99619","date":"2026-10-31"},{"cve":"CVE-2026-46300","epss":"0.1613","percentile":"0.96927","date":"2026-10-31"},{"cve":"CVE-2026-46817","epss":"0.12313","percentile":"0.9619","date":"2026-10-31"},{"cve":"CVE-2026-48027","epss":"0.0185","percentile":"0.79115","date":"2026-10-31"},{"cve":"CVE-2026-48172","epss":"0.17915","percentile":"0.97179","date":"2026-10-31"},{"cve":"CVE-2026-48282","epss":"0.42388","percentile":"0.98703","date":"2026-10-31"},{"cve":"CVE-2026-48356","epss":"0.44579","percentile":"0.98769","date":"2026-10-31"},{"cve":"CVE-2026-48558","epss":"0.77659","percentile":"0.99564","date":"2026-10-31"},{"cve":"CVE-2026-48710","epss":"0.70288","percentile":"0.99383","date":"2026-10-31"},{"cve":"CVE-2026-48907","epss":"0.85439","percentile":"0.9972","date":"2026-10-31"},{"cve":"CVE-2026-48908","epss":"0.88512","percentile":"0.99772","date":"2026-10-31"},{"cve":"CVE-2026-48939","epss":"0.20069","percentile":"0.97447","date":"2026-10-31"},{"cve":"CVE-2026-49869","epss":"0.02095","percentile":"0.81664","date":"2026-10-31"},{"cve":"CVE-2026-50522","epss":"0.03042","percentile":"0.87526","date":"2026-10-31"},{"cve":"CVE-2026-50751","epss":"0.85338","percentile":"0.99717","date":"2026-10-31"},{"cve":"CVE-2026-53266","epss":"0.00934","percentile":"0.60771","date":"2026-10-31"},{"cve":"CVE-2026-53362","epss":"0.00709","percentile":"0.53528","date":"2026-10-31"},{"cve":"CVE-2026-54420","epss":"0.01439","percentile":"0.73166","date":"2026-10-31"},{"cve":"CVE-2026-55040","epss":"0.69536","percentile":"0.99363","date":"2026-10-31"},{"cve":"CVE-2026-55255","epss":"0.00887","percentile":"0.5929","date":"2026-10-31"},{"cve":"CVE-2026-56155","epss":"0.00346","percentile":"0.2823","date":"2026-10-31"},{"cve":"CVE-2026-56164","epss":"0.01011","percentile":"0.63184","date":"2026-10-31"},{"cve":"CVE-2026-56290","epss":"0.30866","percentile":"0.98252","date":"2026-10-31"},{"cve":"CVE-2026-56291","epss":"0.14854","percentile":"0.96695","date":"2026-10-31"},{"cve":"CVE-2026-58644","epss":"0.15873","percentile":"0.96886","date":"2026-10-31"},{"cve":"CVE-2026-58704","epss":"0.00625","percentile":"0.49978","date":"2026-10-31"},{"cve":"CVE-2026-59310","epss":"0.02565","percentile":"0.85123","date":"2026-10-31"},{"cve":"CVE-2026-59822","epss":"0.00836","percentile":"0.57731","date":"2026-10-31"},{"cve":"CVE-2026-5281","epss":"0.13743","percentile":"0.9651","date":"2026-10-31"},{"cve":"CVE-2026-5430","epss":"0.2239","percentile":"0.97695","date":"2026-10-31"},{"cve":"CVE-2026-60004","epss":"0.23988","percentile":"0.97841","date":"2026-10-31"},{"cve":"CVE-2026-60137","epss":"0.05323","percentile":"0.92608","date":"2026-10-31"},{"cve":"CVE-2026-63030","epss":"0.10649","percentile":"0.95798","date":"2026-10-31"},{"cve":"CVE-2026-63077","epss":"0.93558","percentile":"0.99841","date":"2026-10-31"},{"cve":"CVE-2026-64849","epss":"0.10017","percentile":"0.95614","date":"2026-10-31"},{"cve":"CVE-2026-65400","epss":"0.01723","percentile":"0.77517","date":"2026-10-31"},{"cve":"CVE-2026-65660","epss":"0.08189","percentile":"0.94869","date":"2026-10-31"},{"cve":"CVE-2026-66384","epss":"0.00665","percentile":"0.518","date":"2026-10-31"},{"cve":"CVE-2026-67277","epss":"0.0156","percentile":"0.75241","date":"2026-10-31"},{"cve":"CVE-2026-67279","epss":"0.02277","percentile":"0.83114","date":"2026-10-31"},{"cve":"CVE-2026-68820","epss":"0.08567","percentile":"0.95071","date":"2026-10-31"},{"cve":"CVE-2026-6973","epss":"0.34454","percentile":"0.98414","date":"2026-10-31"},{"cve":"CVE-2026-71362","epss":"0.90491","percentile":"0.99801","date":"2026-10-31"},{"cve":"CVE-2026-72529","epss":"0.01464","percentile":"0.7365","date":"2026-10-31"},{"cve":"CVE-2026-72530","epss":"0.01686","percentile":"0.77023","date":"2026-10-31"},{"cve":"CVE-2026-72898","epss":"0.98809","percentile":"0.99927","date":"2026-10-31"},{"cve":"CVE-2026-73570","epss":"0.71663","percentile":"0.99421","date":"2026-10-31"},{"cve":"CVE-2026-75650","epss":"0.03949","percentile":"0.90416","date":"2026-10-31"},{"cve":"CVE-2026-76418","epss":"0.00821","percentile":"0.57306","date":"2026-10-31"},{"cve":"CVE-2026-76460","epss":"0.75599","percentile":"0.99519","date":"2026-10-31"},{"cve":"CVE-2026-76461","epss":"0.29543","percentile":"0.98187","date":"2026-10-31"},{"cve":"CVE-2026-76504","epss":"0.38928","percentile":"0.98589","date":"2026-10-31"},{"cve":"CVE-2026-76519","epss":"0.02152","percentile":"0.82151","date":"2026-10-31"},{"cve":"CVE-2026-7273","epss":"0.02778","percentile":"0.86369","date":"2026-10-31"},{"cve":"CVE-2026-7473","epss":"0.01108","percentile":"0.65872","date":"2026-10-31"},{"cve":"CVE-2026-81578","epss":"0.84734","percentile":"0.99707","date":"2026-10-31"},{"cve":"CVE-2026-81963","epss":"0.00393","percentile":"0.33546","date":"2026-10-31"},{"cve":"CVE-2026-82078","epss":"0.63047","percentile":"0.99201","date":"2026-10-31"},{"cve":"CVE-2026-82329","epss":"0.14372","percentile":"0.96617","date":"2026-10-31"},{"cve":"CVE-2026-83548","epss":"0.08043","percentile":"0.94786","date":"2026-10-31"},{"cve":"CVE-2026-83549","epss":"0.09889","percentile":"0.95574","date":"2026-10-31"},{"cve":"CVE-2026-84869","epss":"0.00924","percentile":"0.60436","date":"2026-10-31"},{"cve":"CVE-2026-85046","epss":"0.01806","percentile":"0.78569","date":"2026-10-31"},{"cve":"CVE-2026-85102","epss":"0.5414","percentile":"0.99007","date":"2026-10-31"},{"cve":"CVE-2026-85706","epss":"0.97355","percentile":"0.99898","date":"2026-10-31"},{"cve":"CVE-2026-85880","epss":"0.00387","percentile":"0.32835","date":"2026-10-31"},{"cve":"CVE-2026-86060","epss":"0.06392","percentile":"0.93669","date":"2026-10-31"},{"cve":"CVE-2026-86218","epss":"0.15385","percentile":"0.96785","date":"2026-10-31"},{"cve":"CVE-2026-86950","epss":"0.26166","percentile":"0.97995","date":"2026-10-31"},{"cve":"CVE-2026-87491","epss":"0.03507","percentile":"0.89191","date":"2026-10-31"},{"cve":"CVE-2026-87886","epss":"0.00233","percentile":"0.14246","date":"2026-10-31"},{"cve":"CVE-2026-87902","epss":"0.95769","percentile":"0.99872","date":"2026-10-31"},{"cve":"CVE-2026-88771","epss":"0.8216","percentile":"0.99655","date":"2026-10-31"},{"cve":"CVE-2026-88772","epss":"0.78162","percentile":"0.99578","date":"2026-10-31"},{"cve":"CVE-2026-88779","epss":"0.11388","percentile":"0.95994","date":"2026-10-31"},{"cve":"CVE-2026-8037","epss":"0.99794","percentile":"0.99957","date":"2026-10-31"},{"cve":"CVE-2026-8398","epss":"0.01456","percentile":"0.73499","date":"2026-10-31"},{"cve":"CVE-2026-8452","epss":"0.01011","percentile":"0.63189","date":"2026-10-31"},{"cve":"CVE-2026-93616","epss":"0.91605","percentile":"0.99813","date":"2026-10-31"},{"cve":"CVE-2026-93952","epss":"0.01384","percentile":"0.72208","date":"2026-10-31"},{"cve":"CVE-2026-94127","epss":"0.2655","percentile":"0.98015","date":"2026-10-31"},{"cve":"CVE-2026-96652","epss":"0.01821","percentile":"0.78758","date":"2026-10-31"},{"cve":"CVE-2026-96654","epss":"0.01949","percentile":"0.8022","date":"2026-10-31"},{"cve":"CVE-2026-96655","epss":"0.01637","percentile":"0.7634","date":"2026-10-31"},{"cve":"CVE-2026-96656","epss":"0.01785","percentile":"0.78305","date":"2026-10-31"},{"cve":"CVE-2026-96951","epss":"0.09813","percentile":"0.9555","date":"2026-10-31"},{"cve":"CVE-2026-97229","epss":"0.273","percentile":"0.9806","date":"2026-10-31"},{"cve":"CVE-2026-9082","epss":"0.89381","percentile":"0.99784","date":"2026-10-31"},{"cve":"CVE-2026-9198","epss":"0.28658","percentile":"0.98137","date":"2026-10-31"},{"cve":"CVE-2026-9586","epss":"0.18979","percentile":"0.97303","date":"2026-10-31"}],"missingCves":["CVE-2026-118527"],"compressedBytes":2795240,"decompressedBytes":12126411,"url":"https://epss.empiricalsecurity.com/epss_scores-current.csv.gz","resolvedUrl":"https://epss.empiricalsecurity.com/epss_scores-2026-10-31.csv.gz","fetchedAt":"2026-11-01T01:26:08.514Z","sha256":"7bb880e89b8fef5e486f13688d92854bd7b3cc77a2d4815c46001c64318455e6","coverageCves":["CVE-2002-0367","CVE-2004-0210","CVE-2004-1464","CVE-2005-2773","CVE-2006-1547","CVE-2006-2492","CVE-2007-0671","CVE-2007-3010","CVE-2007-5659","CVE-2008-0015","CVE-2008-0655","CVE-2008-2992","CVE-2008-3431","CVE-2008-4128","CVE-2008-4250","CVE-2009-0238","CVE-2009-0556","CVE-2009-0557","CVE-2009-0563","CVE-2009-0927","CVE-2009-1123","CVE-2009-1151","CVE-2009-1537","CVE-2009-1862","CVE-2009-2055","CVE-2009-3129","CVE-2009-3459","CVE-2009-3953","CVE-2009-3960","CVE-2009-4324","CVE-2010-0188","CVE-2010-0232","CVE-2010-0249","CVE-2010-0738","CVE-2010-0806","CVE-2010-0840","CVE-2010-1297","CVE-2010-1428","CVE-2010-1871","CVE-2010-2568","CVE-2010-2572","CVE-2010-2861","CVE-2010-2883","CVE-2010-3035","CVE-2010-3333","CVE-2010-3765","CVE-2010-3904","CVE-2010-3962","CVE-2010-4344","CVE-2010-4345","CVE-2010-4398","CVE-2010-5326","CVE-2010-5330","CVE-2011-0609","CVE-2011-0611","CVE-2011-1823","CVE-2011-1889","CVE-2011-2005","CVE-2011-2462","CVE-2011-3402","CVE-2011-3544","CVE-2011-4723","CVE-2012-0151","CVE-2012-0158","CVE-2012-0391","CVE-2012-0507","CVE-2012-0518","CVE-2012-0754","CVE-2012-0767","CVE-2012-1535","CVE-2012-1710","CVE-2012-1723","CVE-2012-1823","CVE-2012-1854","CVE-2012-1856","CVE-2012-1889","CVE-2012-2034","CVE-2012-2539","CVE-2012-3152","CVE-2012-4681","CVE-2012-4792","CVE-2012-4969","CVE-2012-5054","CVE-2012-5076","CVE-2013-0074","CVE-2013-0422","CVE-2013-0431","CVE-2013-0625","CVE-2013-0629","CVE-2013-0631","CVE-2013-0632","CVE-2013-0640","CVE-2013-0641","CVE-2013-0643","CVE-2013-0648","CVE-2013-1331","CVE-2013-1347","CVE-2013-1675","CVE-2013-1690","CVE-2013-2094","CVE-2013-2251","CVE-2013-2423","CVE-2013-2465","CVE-2013-2551","CVE-2013-2596","CVE-2013-2597","CVE-2013-2729","CVE-2013-3163","CVE-2013-3346","CVE-2013-3660","CVE-2013-3893","CVE-2013-3896","CVE-2013-3897","CVE-2013-3900","CVE-2013-3906","CVE-2013-3918","CVE-2013-3993","CVE-2013-4810","CVE-2013-5065","CVE-2013-5223","CVE-2013-6282","CVE-2013-7331","CVE-2014-0130","CVE-2014-0160","CVE-2014-0196","CVE-2014-0322","CVE-2014-0496","CVE-2014-0497","CVE-2014-0502","CVE-2014-0546","CVE-2014-0780","CVE-2014-100005","CVE-2014-1761","CVE-2014-1776","CVE-2014-1812","CVE-2014-2120","CVE-2014-2817","CVE-2014-3120","CVE-2014-3153","CVE-2014-3931","CVE-2014-4077","CVE-2014-4113","CVE-2014-4114","CVE-2014-4123","CVE-2014-4148","CVE-2014-4404","CVE-2014-6271","CVE-2014-6278","CVE-2014-6287","CVE-2014-6324","CVE-2014-6332","CVE-2014-6352","CVE-2014-7169","CVE-2014-8361","CVE-2014-8439","CVE-2014-9163","CVE-2015-0016","CVE-2015-0071","CVE-2015-0310","CVE-2015-0311","CVE-2015-0313","CVE-2015-0666","CVE-2015-1130","CVE-2015-1187","CVE-2015-1427","CVE-2015-1635","CVE-2015-1641","CVE-2015-1642","CVE-2015-1671","CVE-2015-1701","CVE-2015-1769","CVE-2015-1770","CVE-2015-2051","CVE-2015-2291","CVE-2015-2360","CVE-2015-2387","CVE-2015-2419","CVE-2015-2424","CVE-2015-2425","CVE-2015-2426","CVE-2015-2502","CVE-2015-2545","CVE-2015-2546","CVE-2015-2590","CVE-2015-3035","CVE-2015-3043","CVE-2015-3113","CVE-2015-3246","CVE-2015-3306","CVE-2015-4068","CVE-2015-4495","CVE-2015-4852","CVE-2015-4902","CVE-2015-5119","CVE-2015-5122","CVE-2015-5123","CVE-2015-5287","CVE-2015-5317","CVE-2015-5477","CVE-2015-6175","CVE-2015-7450","CVE-2015-7645","CVE-2015-7755","CVE-2015-8651","CVE-2016-0034","CVE-2016-0040","CVE-2016-0099","CVE-2016-0151","CVE-2016-0162","CVE-2016-0165","CVE-2016-0167","CVE-2016-0185","CVE-2016-0189","CVE-2016-0752","CVE-2016-0984","CVE-2016-10033","CVE-2016-1010","CVE-2016-10174","CVE-2016-1019","CVE-2016-11021","CVE-2016-1555","CVE-2016-1646","CVE-2016-20017","CVE-2016-2386","CVE-2016-2388","CVE-2016-3081","CVE-2016-3088","CVE-2016-3235","CVE-2016-3298","CVE-2016-3309","CVE-2016-3351","CVE-2016-3393","CVE-2016-3427","CVE-2016-3643","CVE-2016-3714","CVE-2016-3715","CVE-2016-3718","CVE-2016-3976","CVE-2016-4117","CVE-2016-4171","CVE-2016-4437","CVE-2016-4523","CVE-2016-4655","CVE-2016-4656","CVE-2016-4657","CVE-2016-5195","CVE-2016-5198","CVE-2016-6277","CVE-2016-6366","CVE-2016-6367","CVE-2016-6415","CVE-2016-7193","CVE-2016-7200","CVE-2016-7201","CVE-2016-7255","CVE-2016-7256","CVE-2016-7262","CVE-2016-7836","CVE-2016-7855","CVE-2016-7892","CVE-2016-8562","CVE-2016-8735","CVE-2016-9079","CVE-2016-9563","CVE-2017-0001","CVE-2017-0005","CVE-2017-0022","CVE-2017-0037","CVE-2017-0059","CVE-2017-0101","CVE-2017-0143","CVE-2017-0144","CVE-2017-0145","CVE-2017-0146","CVE-2017-0147","CVE-2017-0148","CVE-2017-0149","CVE-2017-0199","CVE-2017-0210","CVE-2017-0213","CVE-2017-0222","CVE-2017-0261","CVE-2017-0262","CVE-2017-0263","CVE-2017-1000253","CVE-2017-1000353","CVE-2017-1000486","CVE-2017-10271","CVE-2017-11292","CVE-2017-11317","CVE-2017-11357","CVE-2017-11774","CVE-2017-11826","CVE-2017-11882","CVE-2017-12149","CVE-2017-12231","CVE-2017-12232","CVE-2017-12233","CVE-2017-12234","CVE-2017-12235","CVE-2017-12237","CVE-2017-12238","CVE-2017-12240","CVE-2017-12319","CVE-2017-12615","CVE-2017-12617","CVE-2017-12637","CVE-2017-15944","CVE-2017-16651","CVE-2017-17562","CVE-2017-18362","CVE-2017-18368","CVE-2017-3066","CVE-2017-3506","CVE-2017-3881","CVE-2017-5030","CVE-2017-5070","CVE-2017-5521","CVE-2017-5638","CVE-2017-5689","CVE-2017-6077","CVE-2017-6316","CVE-2017-6327","CVE-2017-6334","CVE-2017-6627","CVE-2017-6663","CVE-2017-6736","CVE-2017-6737","CVE-2017-6738","CVE-2017-6739","CVE-2017-6740","CVE-2017-6742","CVE-2017-6743","CVE-2017-6744","CVE-2017-6862","CVE-2017-6884","CVE-2017-7269","CVE-2017-7494","CVE-2017-7921","CVE-2017-8291","CVE-2017-8464","CVE-2017-8540","CVE-2017-8543","CVE-2017-8570","CVE-2017-8759","CVE-2017-9248","CVE-2017-9791","CVE-2017-9805","CVE-2017-9822","CVE-2017-9841","CVE-2018-0125","CVE-2018-0147","CVE-2018-0151","CVE-2018-0154","CVE-2018-0155","CVE-2018-0156","CVE-2018-0158","CVE-2018-0159","CVE-2018-0161","CVE-2018-0167","CVE-2018-0171","CVE-2018-0172","CVE-2018-0173","CVE-2018-0174","CVE-2018-0175","CVE-2018-0179","CVE-2018-0180","CVE-2018-0296","CVE-2018-0798","CVE-2018-0802","CVE-2018-0824","CVE-2018-1000861","CVE-2018-10561","CVE-2018-10562","CVE-2018-11138","CVE-2018-11776","CVE-2018-1273","CVE-2018-13374","CVE-2018-13379","CVE-2018-13382","CVE-2018-13383","CVE-2018-14558","CVE-2018-14634","CVE-2018-14667","CVE-2018-14839","CVE-2018-14847","CVE-2018-14933","CVE-2018-15133","CVE-2018-15811","CVE-2018-15961","CVE-2018-15982","CVE-2018-17463","CVE-2018-17480","CVE-2018-18325","CVE-2018-18809","CVE-2018-19320","CVE-2018-19321","CVE-2018-19322","CVE-2018-19323","CVE-2018-19410","CVE-2018-19943","CVE-2018-19949","CVE-2018-19953","CVE-2018-20062","CVE-2018-20250","CVE-2018-20753","CVE-2018-2380","CVE-2018-2628","CVE-2018-4063","CVE-2018-4344","CVE-2018-4878","CVE-2018-4939","CVE-2018-4990","CVE-2018-5002","CVE-2018-5430","CVE-2018-6065","CVE-2018-6530","CVE-2018-6789","CVE-2018-6882","CVE-2018-6961","CVE-2018-7445","CVE-2018-7600","CVE-2018-7602","CVE-2018-7841","CVE-2018-8120","CVE-2018-8174","CVE-2018-8298","CVE-2018-8373","CVE-2018-8405","CVE-2018-8406","CVE-2018-8414","CVE-2018-8440","CVE-2018-8453","CVE-2018-8581","CVE-2018-8589","CVE-2018-8611","CVE-2018-8639","CVE-2018-8653","CVE-2018-9276","CVE-2019-0193","CVE-2019-0211","CVE-2019-0344","CVE-2019-0541","CVE-2019-0543","CVE-2019-0604","CVE-2019-0676","CVE-2019-0703","CVE-2019-0708","CVE-2019-0752","CVE-2019-0797","CVE-2019-0803","CVE-2019-0808","CVE-2019-0841","CVE-2019-0859","CVE-2019-0863","CVE-2019-0880","CVE-2019-0903","CVE-2019-1003029","CVE-2019-1003030","CVE-2019-10068","CVE-2019-10149","CVE-2019-1064","CVE-2019-1068","CVE-2019-1069","CVE-2019-10758","CVE-2019-11001","CVE-2019-11043","CVE-2019-1129","CVE-2019-1130","CVE-2019-1132","CVE-2019-11510","CVE-2019-11539","CVE-2019-11580","CVE-2019-11581","CVE-2019-11634","CVE-2019-11707","CVE-2019-11708","CVE-2019-1214","CVE-2019-1215","CVE-2019-1253","CVE-2019-1297","CVE-2019-12989","CVE-2019-12991","CVE-2019-1315","CVE-2019-1322","CVE-2019-13272","CVE-2019-13608","CVE-2019-1367","CVE-2019-13720","CVE-2019-1385","CVE-2019-1388","CVE-2019-1405","CVE-2019-1429","CVE-2019-1458","CVE-2019-15107","CVE-2019-15271","CVE-2019-15752","CVE-2019-1579","CVE-2019-15949","CVE-2019-16057","CVE-2019-16256","CVE-2019-16278","CVE-2019-1652","CVE-2019-1653","CVE-2019-16759","CVE-2019-16920","CVE-2019-16928","CVE-2019-17026","CVE-2019-17558","CVE-2019-17621","CVE-2019-18187","CVE-2019-18426","CVE-2019-18935","CVE-2019-18988","CVE-2019-19006","CVE-2019-19356","CVE-2019-19781","CVE-2019-20085","CVE-2019-20500","CVE-2019-2215","CVE-2019-2616","CVE-2019-2725","CVE-2019-3010","CVE-2019-3396","CVE-2019-3398","CVE-2019-3568","CVE-2019-3929","CVE-2019-4716","CVE-2019-5418","CVE-2019-5544","CVE-2019-5591","CVE-2019-5786","CVE-2019-5825","CVE-2019-6223","CVE-2019-6340","CVE-2019-6693","CVE-2019-7192","CVE-2019-7193","CVE-2019-7194","CVE-2019-7195","CVE-2019-7238","CVE-2019-7256","CVE-2019-7286","CVE-2019-7287","CVE-2019-7481","CVE-2019-7483","CVE-2019-7609","CVE-2019-8394","CVE-2019-8506","CVE-2019-8526","CVE-2019-8605","CVE-2019-8720","CVE-2019-9082","CVE-2019-9621","CVE-2019-9670","CVE-2019-9874","CVE-2019-9875","CVE-2019-9978","CVE-2020-0041","CVE-2020-0069","CVE-2020-0601","CVE-2020-0618","CVE-2020-0638","CVE-2020-0646","CVE-2020-0674","CVE-2020-0683","CVE-2020-0688","CVE-2020-0787","CVE-2020-0796","CVE-2020-0878","CVE-2020-0938","CVE-2020-0968","CVE-2020-0986","CVE-2020-10148","CVE-2020-10181","CVE-2020-10189","CVE-2020-10199","CVE-2020-1020","CVE-2020-10221","CVE-2020-1027","CVE-2020-1040","CVE-2020-1054","CVE-2020-10987","CVE-2020-11023","CVE-2020-11261","CVE-2020-1147","CVE-2020-11651","CVE-2020-11652","CVE-2020-11738","CVE-2020-11899","CVE-2020-11978","CVE-2020-12271","CVE-2020-12641","CVE-2020-12812","CVE-2020-1350","CVE-2020-13671","CVE-2020-1380","CVE-2020-13927","CVE-2020-13965","CVE-2020-1464","CVE-2020-14644","CVE-2020-1472","CVE-2020-14750","CVE-2020-14864","CVE-2020-14871","CVE-2020-14882","CVE-2020-14883","CVE-2020-15069","CVE-2020-15415","CVE-2020-15505","CVE-2020-15999","CVE-2020-16009","CVE-2020-16010","CVE-2020-16013","CVE-2020-16017","CVE-2020-1631","CVE-2020-16846","CVE-2020-17087","CVE-2020-17144","CVE-2020-17463","CVE-2020-17496","CVE-2020-17519","CVE-2020-17530","CVE-2020-1938","CVE-2020-1956","CVE-2020-2021","CVE-2020-24363","CVE-2020-24557","CVE-2020-2506","CVE-2020-25078","CVE-2020-25079","CVE-2020-2509","CVE-2020-25213","CVE-2020-25223","CVE-2020-25506","CVE-2020-2551","CVE-2020-2555","CVE-2020-26919","CVE-2020-27930","CVE-2020-27932","CVE-2020-27950","CVE-2020-2883","CVE-2020-28949","CVE-2020-29557","CVE-2020-29574","CVE-2020-29583","CVE-2020-3118","CVE-2020-3153","CVE-2020-3161","CVE-2020-3259","CVE-2020-3433","CVE-2020-3452","CVE-2020-3566","CVE-2020-3569","CVE-2020-35730","CVE-2020-3580","CVE-2020-36193","CVE-2020-3837","CVE-2020-3950","CVE-2020-3952","CVE-2020-3992","CVE-2020-4006","CVE-2020-4427","CVE-2020-4428","CVE-2020-4430","CVE-2020-5135","CVE-2020-5410","CVE-2020-5722","CVE-2020-5735","CVE-2020-5741","CVE-2020-5847","CVE-2020-5849","CVE-2020-5902","CVE-2020-6207","CVE-2020-6287","CVE-2020-6418","CVE-2020-6572","CVE-2020-6819","CVE-2020-6820","CVE-2020-7247","CVE-2020-7796","CVE-2020-7961","CVE-2020-8193","CVE-2020-8195","CVE-2020-8196","CVE-2020-8218","CVE-2020-8243","CVE-2020-8260","CVE-2020-8467","CVE-2020-8468","CVE-2020-8515","CVE-2020-8599","CVE-2020-8644","CVE-2020-8655","CVE-2020-8657","CVE-2020-8816","CVE-2020-9054","CVE-2020-9377","CVE-2020-9715","CVE-2020-9818","CVE-2020-9819","CVE-2020-9859","CVE-2020-9907","CVE-2020-9934","CVE-2021-0920","CVE-2021-1048","CVE-2021-1497","CVE-2021-1498","CVE-2021-1647","CVE-2021-1675","CVE-2021-1732","CVE-2021-1782","CVE-2021-1789","CVE-2021-1870","CVE-2021-1871","CVE-2021-1879","CVE-2021-1905","CVE-2021-1906","CVE-2021-20016","CVE-2021-20021","CVE-2021-20022","CVE-2021-20023","CVE-2021-20028","CVE-2021-20035","CVE-2021-20038","CVE-2021-20090","CVE-2021-20123","CVE-2021-20124","CVE-2021-21017","CVE-2021-21148","CVE-2021-21166","CVE-2021-21193","CVE-2021-21206","CVE-2021-21220","CVE-2021-21224","CVE-2021-21311","CVE-2021-21315","CVE-2021-21551","CVE-2021-21972","CVE-2021-21973","CVE-2021-21975","CVE-2021-21985","CVE-2021-22005","CVE-2021-22017","CVE-2021-22054","CVE-2021-22175","CVE-2021-22204","CVE-2021-22205","CVE-2021-22502","CVE-2021-22506","CVE-2021-22555","CVE-2021-22600","CVE-2021-22681","CVE-2021-22893","CVE-2021-22894","CVE-2021-22899","CVE-2021-22900","CVE-2021-22941","CVE-2021-22986","CVE-2021-22991","CVE-2021-23758","CVE-2021-23874","CVE-2021-25296","CVE-2021-25297","CVE-2021-25298","CVE-2021-25337","CVE-2021-25369","CVE-2021-25370","CVE-2021-25371","CVE-2021-25372","CVE-2021-25394","CVE-2021-25395","CVE-2021-25487","CVE-2021-25489","CVE-2021-26084","CVE-2021-26085","CVE-2021-26086","CVE-2021-26411","CVE-2021-26828","CVE-2021-26829","CVE-2021-26855","CVE-2021-26857","CVE-2021-26858","CVE-2021-27059","CVE-2021-27065","CVE-2021-27085","CVE-2021-27101","CVE-2021-27102","CVE-2021-27103","CVE-2021-27104","CVE-2021-27137","CVE-2021-27561","CVE-2021-27562","CVE-2021-27852","CVE-2021-27860","CVE-2021-27876","CVE-2021-27877","CVE-2021-27878","CVE-2021-28310","CVE-2021-28550","CVE-2021-28663","CVE-2021-28664","CVE-2021-28799","CVE-2021-29256","CVE-2021-30116","CVE-2021-30533","CVE-2021-30551","CVE-2021-30554","CVE-2021-30563","CVE-2021-30632","CVE-2021-30633","CVE-2021-30657","CVE-2021-30661","CVE-2021-30663","CVE-2021-30665","CVE-2021-30666","CVE-2021-30713","CVE-2021-30761","CVE-2021-30762","CVE-2021-30807","CVE-2021-30858","CVE-2021-30860","CVE-2021-30869","CVE-2021-30883","CVE-2021-30900","CVE-2021-30952","CVE-2021-30983","CVE-2021-31010","CVE-2021-31166","CVE-2021-31196","CVE-2021-31199","CVE-2021-31201","CVE-2021-31207","CVE-2021-3129","CVE-2021-3156","CVE-2021-31755","CVE-2021-31955","CVE-2021-31956","CVE-2021-31979","CVE-2021-3199","CVE-2021-32030","CVE-2021-32648","CVE-2021-33044","CVE-2021-33045","CVE-2021-33739","CVE-2021-33742","CVE-2021-33766","CVE-2021-33771","CVE-2021-34448","CVE-2021-34473","CVE-2021-34484","CVE-2021-34486","CVE-2021-34523","CVE-2021-34527","CVE-2021-3493","CVE-2021-35211","CVE-2021-35247","CVE-2021-35394","CVE-2021-35395","CVE-2021-35464","CVE-2021-35587","CVE-2021-3560","CVE-2021-36260","CVE-2021-36380","CVE-2021-36741","CVE-2021-36742","CVE-2021-36934","CVE-2021-36942","CVE-2021-36948","CVE-2021-36955","CVE-2021-37415","CVE-2021-37973","CVE-2021-37975","CVE-2021-37976","CVE-2021-38000","CVE-2021-38003","CVE-2021-38163","CVE-2021-38406","CVE-2021-38645","CVE-2021-38646","CVE-2021-38647","CVE-2021-38648","CVE-2021-38649","CVE-2021-39144","CVE-2021-39226","CVE-2021-39793","CVE-2021-39935","CVE-2021-4034","CVE-2021-40407","CVE-2021-40438","CVE-2021-40444","CVE-2021-40449","CVE-2021-40450","CVE-2021-40539","CVE-2021-40655","CVE-2021-40870","CVE-2021-4102","CVE-2021-41277","CVE-2021-41357","CVE-2021-41379","CVE-2021-41773","CVE-2021-42013","CVE-2021-42237","CVE-2021-42258","CVE-2021-42278","CVE-2021-42287","CVE-2021-42292","CVE-2021-42321","CVE-2021-43226","CVE-2021-43798","CVE-2021-43890","CVE-2021-44026","CVE-2021-44077","CVE-2021-44168","CVE-2021-44207","CVE-2021-44228","CVE-2021-44515","CVE-2021-44529","CVE-2021-45046","CVE-2021-45382","CVE-2022-0028","CVE-2022-0185","CVE-2022-0492","CVE-2022-0543","CVE-2022-0609","CVE-2022-0847","CVE-2022-0995","CVE-2022-1040","CVE-2022-1096","CVE-2022-1364","CVE-2022-1388","CVE-2022-20699","CVE-2022-20700","CVE-2022-20701","CVE-2022-20703","CVE-2022-20708","CVE-2022-20775","CVE-2022-20821","CVE-2022-21445","CVE-2022-21587","CVE-2022-21882","CVE-2022-21919","CVE-2022-21971","CVE-2022-21999","CVE-2022-22047","CVE-2022-22071","CVE-2022-22265","CVE-2022-22536","CVE-2022-22587","CVE-2022-22620","CVE-2022-22674","CVE-2022-22675","CVE-2022-22706","CVE-2022-22718","CVE-2022-2294","CVE-2022-22947","CVE-2022-22948","CVE-2022-22954","CVE-2022-22960","CVE-2022-22963","CVE-2022-22965","CVE-2022-23131","CVE-2022-23134","CVE-2022-23176","CVE-2022-23227","CVE-2022-23748","CVE-2022-24086","CVE-2022-24112","CVE-2022-24521","CVE-2022-24682","CVE-2022-24706","CVE-2022-24816","CVE-2022-24990","CVE-2022-2586","CVE-2022-26134","CVE-2022-26138","CVE-2022-26143","CVE-2022-26258","CVE-2022-26318","CVE-2022-26352","CVE-2022-26485","CVE-2022-26486","CVE-2022-26500","CVE-2022-26501","CVE-2022-26871","CVE-2022-26904","CVE-2022-26923","CVE-2022-26925","CVE-2022-27518","CVE-2022-27593","CVE-2022-27924","CVE-2022-27925","CVE-2022-27926","CVE-2022-2856","CVE-2022-28810","CVE-2022-29303","CVE-2022-29464","CVE-2022-29499","CVE-2022-30190","CVE-2022-30333","CVE-2022-3038","CVE-2022-30525","CVE-2022-3075","CVE-2022-31199","CVE-2022-3236","CVE-2022-32893","CVE-2022-32894","CVE-2022-32917","CVE-2022-33891","CVE-2022-34713","CVE-2022-35405","CVE-2022-35914","CVE-2022-36537","CVE-2022-36804","CVE-2022-37042","CVE-2022-37055","CVE-2022-3723","CVE-2022-37969","CVE-2022-38028","CVE-2022-38181","CVE-2022-39197","CVE-2022-40139","CVE-2022-40684","CVE-2022-40765","CVE-2022-40799","CVE-2022-41033","CVE-2022-41040","CVE-2022-41049","CVE-2022-41073","CVE-2022-41080","CVE-2022-41082","CVE-2022-41091","CVE-2022-41125","CVE-2022-41128","CVE-2022-41223","CVE-2022-41328","CVE-2022-4135","CVE-2022-41352","CVE-2022-42475","CVE-2022-4262","CVE-2022-42827","CVE-2022-42856","CVE-2022-42948","CVE-2022-43769","CVE-2022-43939","CVE-2022-44698","CVE-2022-44877","CVE-2022-46169","CVE-2022-47966","CVE-2022-47986","CVE-2022-48503","CVE-2022-48618","CVE-2023-0266","CVE-2023-0386","CVE-2023-0669","CVE-2023-1177","CVE-2023-1389","CVE-2023-1671","CVE-2023-20109","CVE-2023-20118","CVE-2023-20198","CVE-2023-20269","CVE-2023-20273","CVE-2023-2033","CVE-2023-20867","CVE-2023-20887","CVE-2023-20963","CVE-2023-21237","CVE-2023-2136","CVE-2023-21492","CVE-2023-21529","CVE-2023-21608","CVE-2023-21674","CVE-2023-21715","CVE-2023-21823","CVE-2023-21839","CVE-2023-22515","CVE-2023-22518","CVE-2023-22527","CVE-2023-22894","CVE-2023-22952","CVE-2023-23376","CVE-2023-23397","CVE-2023-23529","CVE-2023-23752","CVE-2023-24489","CVE-2023-24880","CVE-2023-24955","CVE-2023-25280","CVE-2023-2533","CVE-2023-25717","CVE-2023-26083","CVE-2023-26359","CVE-2023-26360","CVE-2023-26369","CVE-2023-27350","CVE-2023-27351","CVE-2023-27524","CVE-2023-27532","CVE-2023-27992","CVE-2023-27997","CVE-2023-28204","CVE-2023-28205","CVE-2023-28206","CVE-2023-28229","CVE-2023-28252","CVE-2023-28432","CVE-2023-28434","CVE-2023-28461","CVE-2023-2868","CVE-2023-28771","CVE-2023-29298","CVE-2023-29300","CVE-2023-29336","CVE-2023-29357","CVE-2023-29360","CVE-2023-29492","CVE-2023-29552","CVE-2023-3079","CVE-2023-32046","CVE-2023-32049","CVE-2023-32315","CVE-2023-32373","CVE-2023-32409","CVE-2023-32434","CVE-2023-32435","CVE-2023-32439","CVE-2023-33009","CVE-2023-33010","CVE-2023-33063","CVE-2023-33106","CVE-2023-33107","CVE-2023-33246","CVE-2023-33538","CVE-2023-34048","CVE-2023-34192","CVE-2023-34362","CVE-2023-35078","CVE-2023-35081","CVE-2023-35082","CVE-2023-3519","CVE-2023-35311","CVE-2023-35674","CVE-2023-36025","CVE-2023-36033","CVE-2023-36036","CVE-2023-36424","CVE-2023-36563","CVE-2023-36584","CVE-2023-36761","CVE-2023-36802","CVE-2023-36844","CVE-2023-36845","CVE-2023-36846","CVE-2023-36847","CVE-2023-36851","CVE-2023-36874","CVE-2023-36884","CVE-2023-37450","CVE-2023-37580","CVE-2023-38035","CVE-2023-38180","CVE-2023-38203","CVE-2023-38205","CVE-2023-38606","CVE-2023-38831","CVE-2023-38950","CVE-2023-39780","CVE-2023-40044","CVE-2023-41061","CVE-2023-41064","CVE-2023-41179","CVE-2023-41265","CVE-2023-41266","CVE-2023-41763","CVE-2023-41974","CVE-2023-41990","CVE-2023-41991","CVE-2023-41992","CVE-2023-41993","CVE-2023-4211","CVE-2023-42793","CVE-2023-42824","CVE-2023-42916","CVE-2023-42917","CVE-2023-43000","CVE-2023-43208","CVE-2023-4346","CVE-2023-43770","CVE-2023-44221","CVE-2023-44487","CVE-2023-45249","CVE-2023-45727","CVE-2023-46604","CVE-2023-46747","CVE-2023-46748","CVE-2023-46805","CVE-2023-47246","CVE-2023-47565","CVE-2023-4762","CVE-2023-48365","CVE-2023-4863","CVE-2023-48788","CVE-2023-49103","CVE-2023-49105","CVE-2023-4911","CVE-2023-4966","CVE-2023-49897","CVE-2023-50224","CVE-2023-52163","CVE-2023-5217","CVE-2023-5631","CVE-2023-6345","CVE-2023-6448","CVE-2023-6548","CVE-2023-6549","CVE-2023-7024","CVE-2023-7028","CVE-2023-7101","CVE-2024-0012","CVE-2024-0519","CVE-2024-0769","CVE-2024-1086","CVE-2024-11120","CVE-2024-11182","CVE-2024-11667","CVE-2024-11680","CVE-2024-1212","CVE-2024-12356","CVE-2024-12686","CVE-2024-12987","CVE-2024-13159","CVE-2024-13160","CVE-2024-13161","CVE-2024-1708","CVE-2024-1709","CVE-2024-20353","CVE-2024-20359","CVE-2024-20399","CVE-2024-20439","CVE-2024-20481","CVE-2024-20767","CVE-2024-20953","CVE-2024-21182","CVE-2024-21287","CVE-2024-21338","CVE-2024-21351","CVE-2024-21410","CVE-2024-21412","CVE-2024-21413","CVE-2024-21762","CVE-2024-21887","CVE-2024-21893","CVE-2024-23113","CVE-2024-23222","CVE-2024-23225","CVE-2024-23296","CVE-2024-23692","CVE-2024-23897","CVE-2024-24919","CVE-2024-26169","CVE-2024-27198","CVE-2024-27199","CVE-2024-27348","CVE-2024-27443","CVE-2024-28986","CVE-2024-28987","CVE-2024-28995","CVE-2024-29059","CVE-2024-29745","CVE-2024-29748","CVE-2024-29824","CVE-2024-29988","CVE-2024-30040","CVE-2024-30051","CVE-2024-30088","CVE-2024-32113","CVE-2024-3272","CVE-2024-3273","CVE-2024-32896","CVE-2024-3393","CVE-2024-3400","CVE-2024-34102","CVE-2024-35250","CVE-2024-36401","CVE-2024-36971","CVE-2024-37079","CVE-2024-37085","CVE-2024-37383","CVE-2024-38014","CVE-2024-38080","CVE-2024-38094","CVE-2024-38106","CVE-2024-38107","CVE-2024-38112","CVE-2024-38178","CVE-2024-38189","CVE-2024-38193","CVE-2024-38213","CVE-2024-38217","CVE-2024-38226","CVE-2024-38475","CVE-2024-38812","CVE-2024-38813","CVE-2024-38856","CVE-2024-39717","CVE-2024-39891","CVE-2024-4040","CVE-2024-40711","CVE-2024-40766","CVE-2024-40890","CVE-2024-40891","CVE-2024-41710","CVE-2024-41713","CVE-2024-42009","CVE-2024-43047","CVE-2024-43093","CVE-2024-43451","CVE-2024-43461","CVE-2024-43468","CVE-2024-43572","CVE-2024-43573","CVE-2024-4358","CVE-2024-44308","CVE-2024-44309","CVE-2024-45195","CVE-2024-45519","CVE-2024-4577","CVE-2024-4610","CVE-2024-4671","CVE-2024-47575","CVE-2024-4761","CVE-2024-48248","CVE-2024-4879","CVE-2024-4885","CVE-2024-49035","CVE-2024-49039","CVE-2024-49138","CVE-2024-4947","CVE-2024-4978","CVE-2024-50302","CVE-2024-50603","CVE-2024-50623","CVE-2024-51378","CVE-2024-51567","CVE-2024-5217","CVE-2024-5274","CVE-2024-53104","CVE-2024-53150","CVE-2024-53197","CVE-2024-53704","CVE-2024-54085","CVE-2024-55550","CVE-2024-55591","CVE-2024-55956","CVE-2024-56145","CVE-2024-57726","CVE-2024-57727","CVE-2024-57728","CVE-2024-57968","CVE-2024-58136","CVE-2024-5910","CVE-2024-6047","CVE-2024-6670","CVE-2024-7262","CVE-2024-7399","CVE-2024-7593","CVE-2024-7694","CVE-2024-7965","CVE-2024-7971","CVE-2024-8068","CVE-2024-8069","CVE-2024-8190","CVE-2024-8956","CVE-2024-8957","CVE-2024-8963","CVE-2024-9379","CVE-2024-9380","CVE-2024-9463","CVE-2024-9465","CVE-2024-9474","CVE-2024-9537","CVE-2024-9680","CVE-2025-0108","CVE-2025-0111","CVE-2025-0282","CVE-2025-0411","CVE-2025-0994","CVE-2025-10035","CVE-2025-10585","CVE-2025-11371","CVE-2025-11953","CVE-2025-12480","CVE-2025-1316","CVE-2025-13223","CVE-2025-14174","CVE-2025-14611","CVE-2025-14733","CVE-2025-14847","CVE-2025-15556","CVE-2025-1976","CVE-2025-20281","CVE-2025-20333","CVE-2025-20337","CVE-2025-20352","CVE-2025-20362","CVE-2025-20393","CVE-2025-21042","CVE-2025-21043","CVE-2025-21333","CVE-2025-21334","CVE-2025-21335","CVE-2025-21391","CVE-2025-21418","CVE-2025-21479","CVE-2025-21480","CVE-2025-21590","CVE-2025-22224","CVE-2025-22225","CVE-2025-22226","CVE-2025-22457","CVE-2025-23006","CVE-2025-23209","CVE-2025-24016","CVE-2025-24054","CVE-2025-24085","CVE-2025-24200","CVE-2025-24201","CVE-2025-24472","CVE-2025-24813","CVE-2025-24893","CVE-2025-24983","CVE-2025-24984","CVE-2025-24985","CVE-2025-24989","CVE-2025-24990","CVE-2025-24991","CVE-2025-24993","CVE-2025-25181","CVE-2025-25249","CVE-2025-25257","CVE-2025-26399","CVE-2025-26633","CVE-2025-27038","CVE-2025-27363","CVE-2025-2746","CVE-2025-2747","CVE-2025-2749","CVE-2025-2775","CVE-2025-2776","CVE-2025-2783","CVE-2025-27915","CVE-2025-27920","CVE-2025-29635","CVE-2025-29824","CVE-2025-30066","CVE-2025-30154","CVE-2025-30397","CVE-2025-30400","CVE-2025-30406","CVE-2025-31125","CVE-2025-31161","CVE-2025-31200","CVE-2025-31201","CVE-2025-31277","CVE-2025-31324","CVE-2025-32432","CVE-2025-32433","CVE-2025-32463","CVE-2025-3248","CVE-2025-32701","CVE-2025-32706","CVE-2025-32709","CVE-2025-32756","CVE-2025-32975","CVE-2025-33053","CVE-2025-33073","CVE-2025-34026","CVE-2025-34028","CVE-2025-34291","CVE-2025-35939","CVE-2025-37164","CVE-2025-38352","CVE-2025-3928","CVE-2025-3935","CVE-2025-39682","CVE-2025-39964","CVE-2025-4008","CVE-2025-40536","CVE-2025-40551","CVE-2025-40602","CVE-2025-41244","CVE-2025-42599","CVE-2025-42999","CVE-2025-43200","CVE-2025-43300","CVE-2025-43510","CVE-2025-43520","CVE-2025-43529","CVE-2025-4427","CVE-2025-4428","CVE-2025-4632","CVE-2025-47729","CVE-2025-47812","CVE-2025-47813","CVE-2025-47827","CVE-2025-48384","CVE-2025-48543","CVE-2025-48572","CVE-2025-48595","CVE-2025-48633","CVE-2025-48700","CVE-2025-48703","CVE-2025-48927","CVE-2025-48928","CVE-2025-49113","CVE-2025-49704","CVE-2025-49706","CVE-2025-5086","CVE-2025-52691","CVE-2025-53521","CVE-2025-53690","CVE-2025-53770","CVE-2025-54068","CVE-2025-5419","CVE-2025-54236","CVE-2025-54253","CVE-2025-54309","CVE-2025-54313","CVE-2025-54948","CVE-2025-55177","CVE-2025-55182","CVE-2025-5777","CVE-2025-57819","CVE-2025-58034","CVE-2025-58360","CVE-2025-59230","CVE-2025-59287","CVE-2025-59374","CVE-2025-59689","CVE-2025-59718","CVE-2025-60710","CVE-2025-61624","CVE-2025-61757","CVE-2025-61882","CVE-2025-61884","CVE-2025-61932","CVE-2025-6204","CVE-2025-6205","CVE-2025-6218","CVE-2025-62215","CVE-2025-62221","CVE-2025-62593","CVE-2025-64328","CVE-2025-64446","CVE-2025-6543","CVE-2025-6554","CVE-2025-6558","CVE-2025-66376","CVE-2025-66644","CVE-2025-67038","CVE-2025-68461","CVE-2025-68613","CVE-2025-68645","CVE-2025-68686","CVE-2025-7775","CVE-2025-8088","CVE-2025-8110","CVE-2025-8875","CVE-2025-8876","CVE-2025-9242","CVE-2025-9377","CVE-2026-0257","CVE-2026-0300","CVE-2026-0322","CVE-2026-0770","CVE-2026-102489","CVE-2026-102490","CVE-2026-102764","CVE-2026-104286","CVE-2026-104935","CVE-2026-105133","CVE-2026-105134","CVE-2026-10520","CVE-2026-106931","CVE-2026-109618","CVE-2026-109619","CVE-2026-110447","CVE-2026-110936","CVE-2026-111357","CVE-2026-111497","CVE-2026-114625","CVE-2026-11645","CVE-2026-118527","CVE-2026-12569","CVE-2026-1281","CVE-2026-1340","CVE-2026-15409","CVE-2026-15410","CVE-2026-1603","CVE-2026-16232","CVE-2026-16812","CVE-2026-1731","CVE-2026-18556","CVE-2026-18577","CVE-2026-19490","CVE-2026-20045","CVE-2026-20079","CVE-2026-20122","CVE-2026-20127","CVE-2026-20128","CVE-2026-20131","CVE-2026-20133","CVE-2026-20182","CVE-2026-20230","CVE-2026-20245","CVE-2026-20253","CVE-2026-20262","CVE-2026-20316","CVE-2026-20349","CVE-2026-20700","CVE-2026-20805","CVE-2026-20963","CVE-2026-21385","CVE-2026-21509","CVE-2026-21510","CVE-2026-21513","CVE-2026-21514","CVE-2026-21519","CVE-2026-21525","CVE-2026-21533","CVE-2026-21589","CVE-2026-21643","CVE-2026-21962","CVE-2026-22719","CVE-2026-22769","CVE-2026-23760","CVE-2026-24061","CVE-2026-2441","CVE-2026-24423","CVE-2026-24858","CVE-2026-25089","CVE-2026-25108","CVE-2026-28318","CVE-2026-3055","CVE-2026-31431","CVE-2026-32201","CVE-2026-32202","CVE-2026-33017","CVE-2026-33634","CVE-2026-33824","CVE-2026-33825","CVE-2026-34197","CVE-2026-34486","CVE-2026-34621","CVE-2026-34908","CVE-2026-34909","CVE-2026-34910","CVE-2026-34926","CVE-2026-3502","CVE-2026-35273","CVE-2026-35616","CVE-2026-3909","CVE-2026-3910","CVE-2026-39808","CVE-2026-39987","CVE-2026-41091","CVE-2026-41709","CVE-2026-41940","CVE-2026-42016","CVE-2026-42018","CVE-2026-42208","CVE-2026-42271","CVE-2026-42897","CVE-2026-45247","CVE-2026-45321","CVE-2026-45498","CVE-2026-45659","CVE-2026-46300","CVE-2026-46817","CVE-2026-48027","CVE-2026-48172","CVE-2026-48282","CVE-2026-48356","CVE-2026-48558","CVE-2026-48710","CVE-2026-48907","CVE-2026-48908","CVE-2026-48939","CVE-2026-49869","CVE-2026-50522","CVE-2026-50751","CVE-2026-5281","CVE-2026-53266","CVE-2026-53362","CVE-2026-5430","CVE-2026-54420","CVE-2026-55040","CVE-2026-55255","CVE-2026-56155","CVE-2026-56164","CVE-2026-56290","CVE-2026-56291","CVE-2026-58644","CVE-2026-58704","CVE-2026-59310","CVE-2026-59822","CVE-2026-60004","CVE-2026-60137","CVE-2026-63030","CVE-2026-63077","CVE-2026-64849","CVE-2026-65400","CVE-2026-65660","CVE-2026-66384","CVE-2026-67277","CVE-2026-67279","CVE-2026-68820","CVE-2026-6973","CVE-2026-71362","CVE-2026-72529","CVE-2026-72530","CVE-2026-7273","CVE-2026-72898","CVE-2026-73570","CVE-2026-7473","CVE-2026-75650","CVE-2026-76418","CVE-2026-76460","CVE-2026-76461","CVE-2026-76504","CVE-2026-76519","CVE-2026-8037","CVE-2026-81578","CVE-2026-81963","CVE-2026-82078","CVE-2026-82329","CVE-2026-83548","CVE-2026-83549","CVE-2026-8398","CVE-2026-8452","CVE-2026-84869","CVE-2026-85046","CVE-2026-85102","CVE-2026-85706","CVE-2026-85880","CVE-2026-86060","CVE-2026-86218","CVE-2026-86950","CVE-2026-87491","CVE-2026-87886","CVE-2026-87902","CVE-2026-88771","CVE-2026-88772","CVE-2026-88779","CVE-2026-9082","CVE-2026-9198","CVE-2026-93616","CVE-2026-93952","CVE-2026-94127","CVE-2026-9586","CVE-2026-96652","CVE-2026-96654","CVE-2026-96655","CVE-2026-96656","CVE-2026-96951","CVE-2026-97229"],"aiAdvisoryCves":["CVE-2023-1177"]}}