diff --git a/assets/html/css/style.css b/assets/html/css/style.css index 11fcded..a52add2 100644 --- a/assets/html/css/style.css +++ b/assets/html/css/style.css @@ -39,3 +39,7 @@ A:active { img.c1 { border:0;width:88px;height:31px } +td { + vertical-align: text-top; + font-size: 12pt; +} \ No newline at end of file diff --git a/assets/html/fire-icon.png b/assets/html/fire-icon.png new file mode 100644 index 0000000..ee1be46 Binary files /dev/null and b/assets/html/fire-icon.png differ diff --git a/assets/html/index.tplt b/assets/html/index.tplt index acd1b5b..b65dbd7 100644 --- a/assets/html/index.tplt +++ b/assets/html/index.tplt @@ -19,19 +19,28 @@ - [txt] dig +short txt istheinternetonfire.app [json] + [txt] dig +short txt istheinternetonfire.app [json]
- {{- if gt (len .CVEs) 0 }}

Yes!
- It's always something.

-
What's Burning?
+ {{- range .CVEs }} - {{ .CveID | ToUpper }} - {{ .Product }} - {{ .ShortDescription }}
+ + + + + {{- end }} +
+ {{ .CveID | ToUpper }} + + {{ .Product }} + + {{ .ShortDescription }} +
{{ else }}

Nope!
@@ -39,11 +48,11 @@ {{- end }}

- Inspiration for this site was taken directly from istheinternetonfire.com by @jschauma. + Data provided by CISA & NIST.
- Updated by @nhyatt. + Special thanks to @jschauma author of istheinternetonfire.com.
- Source located on GiTea + Updated by @nhyatt. Source diff --git a/assets/html/robots.txt b/assets/html/robots.txt new file mode 100644 index 0000000..7dd708a --- /dev/null +++ b/assets/html/robots.txt @@ -0,0 +1,23 @@ +User-agent: CCBot +Disallow: / + +User-agent: GPTBot +Disallow: / + +User-agent: ChatGPT-User +Disallow: / + +User-agent: Google-Extended +Disallow: / + +User-agent: FacebookBot +Disallow: / + +User-agent: Omgilibot +Disallow: / + +User-agent: cohere-ai +Disallow: / + +User-agent: anthropic-ai +Disallow: / diff --git a/assets/html/site.webmanifest b/assets/html/site.webmanifest new file mode 100644 index 0000000..aec5419 --- /dev/null +++ b/assets/html/site.webmanifest @@ -0,0 +1,20 @@ +{ + "name": "Is the internet on fire", + "short_name": "istheinternetonfire.app", + "start_url": "https://istheinternetonfir.app", + "display": "standalone", + "background_color": "#fff", + "description": "A website dedicated to communicating the most recent critical internet vulnerabilities.", + "icons": [ + { + "src": "apple-touch-icon.png", + "sizes": "180x180", + "type": "image/png" + }, + { + "src": "favicon-32x32.png", + "sizes": "32x32", + "type": "image/png" + } + ] +} \ No newline at end of file diff --git a/go.mod b/go.mod index ea1b0dd..961bf04 100644 --- a/go.mod +++ b/go.mod @@ -1,3 +1,12 @@ module istheinternetonfire.app go 1.21.6 + +require github.com/miekg/dns v1.1.57 + +require ( + golang.org/x/mod v0.14.0 // indirect + golang.org/x/net v0.20.0 // indirect + golang.org/x/sys v0.16.0 // indirect + golang.org/x/tools v0.17.0 // indirect +) diff --git a/go.sum b/go.sum new file mode 100644 index 0000000..8cdbf00 --- /dev/null +++ b/go.sum @@ -0,0 +1,12 @@ +github.com/miekg/dns v1.1.57 h1:Jzi7ApEIzwEPLHWRcafCN9LZSBbqQpxjt/wpgvg7wcM= +github.com/miekg/dns v1.1.57/go.mod h1:uqRjCRUuEAA6qsOiJvDd+CFo/vW+y5WR6SNmHE55hZk= +golang.org/x/mod v0.14.0 h1:dGoOF9QVLYng8IHTm7BAyWqCqSheQ5pYWGhzW00YJr0= +golang.org/x/mod v0.14.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= +golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo= +golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY= +golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ= +golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU= +golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/tools v0.17.0 h1:FvmRgNOcs3kOa+T20R1uhfP9F6HgG2mfxDv1vrx1Htc= +golang.org/x/tools v0.17.0/go.mod h1:xsh6VxdV005rRVaS6SSAf9oiAqljS7UZUacMZ8Bnsps= diff --git a/internal/cisa/cisa.go b/internal/cisa/cisa.go index 549ff52..7f53b44 100644 --- a/internal/cisa/cisa.go +++ b/internal/cisa/cisa.go @@ -2,12 +2,10 @@ package cisa import ( "encoding/json" - "net/http" "sync" "time" "istheinternetonfire.app/internal/config" - "istheinternetonfire.app/internal/httpclient" ) var ( @@ -24,12 +22,16 @@ func Read() CisaJSON { func Start() { for { - c := httpclient.NewClient(http.DefaultClient) - d, err := c.Get(config.Cfg.RemoteURL) - if err != nil { - time.Sleep(time.Second * 120) - continue - } + /* + c := httpclient.NewClient(http.DefaultClient) + d, err := c.Get(config.Cfg.RemoteURL) + if err != nil { + time.Sleep(time.Second * 120) + continue + } + */ + + d := GetExampleData() mu.Lock() if err := json.Unmarshal(d, &Cisa); err != nil { diff --git a/internal/cisa/example.go b/internal/cisa/example.go new file mode 100644 index 0000000..a8855ab --- /dev/null +++ b/internal/cisa/example.go @@ -0,0 +1,12780 @@ +package cisa + +func GetExampleData() []byte { +return []byte(`{ + "title": "CISA Catalog of Known Exploited Vulnerabilities", + "catalogVersion": "2024.01.11", + "dateReleased": "2024-01-11T13:06:18.3302Z", + "count": 1064, + "vulnerabilities": [ + { + "cveID": "CVE-2021-27104", + "vendorProject": "Accellion", + "product": "FTA", + "vulnerabilityName": "Accellion FTA OS Command Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-27102", + "vendorProject": "Accellion", + "product": "FTA", + "vulnerabilityName": "Accellion FTA OS Command Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-27101", + "vendorProject": "Accellion", + "product": "FTA", + "vulnerabilityName": "Accellion FTA SQL Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-27103", + "vendorProject": "Accellion", + "product": "FTA", + "vulnerabilityName": "Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-21017", + "vendorProject": "Adobe", + "product": "Acrobat and Reader", + "vulnerabilityName": "Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-28550", + "vendorProject": "Adobe", + "product": "Acrobat and Reader", + "vulnerabilityName": "Adobe Acrobat and Reader Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-4939", + "vendorProject": "Adobe", + "product": "ColdFusion", + "vulnerabilityName": "Adobe ColdFusion Deserialization of Untrusted Data Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Adobe ColdFusion contains a deserialization of untrusted data vulnerability that could allow for code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-15961", + "vendorProject": "Adobe", + "product": "ColdFusion", + "vulnerabilityName": "Adobe ColdFusion Unrestricted File Upload Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Adobe ColdFusion contains an unrestricted file upload vulnerability that could allow for code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-4878", + "vendorProject": "Adobe", + "product": "Flash Player", + "vulnerabilityName": "Adobe Flash Player Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.", + "requiredAction": "The impacted product is end-of-life and should be disconnected if still in use.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-5735", + "vendorProject": "Amcrest", + "product": "Cameras and Network Video Recorder (NVR)", + "vulnerabilityName": "Amcrest Cameras and NVR Stack-based Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-2215", + "vendorProject": "Android", + "product": "Android Kernel", + "vulnerabilityName": "Android Kernel Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Android Kernel contains a use-after-free vulnerability in binder.c that allows for privilege escalation from an application to the Linux Kernel. This vulnerability was observed chained with CVE-2020-0041 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-0041", + "vendorProject": "Android", + "product": "Android Kernel", + "vulnerabilityName": "Android Kernel Out-of-Bounds Write Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Android Kernel binder_transaction of binder.c contains an out-of-bounds write vulnerability due to an incorrect bounds check that could allow for local privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0069 under exploit chain \"AbstractEmu.\"", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-0069", + "vendorProject": "MediaTek", + "product": "Multiple Chipsets", + "vulnerabilityName": "Mediatek Multiple Chipsets Insufficient Input Validation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and CVE-2020-0041 under exploit chain \"AbstractEmu.\"", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2017-9805", + "vendorProject": "Apache", + "product": "Struts", + "vulnerabilityName": "Apache Struts Deserialization of Untrusted Data Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache Struts REST Plugin uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can lead to remote code execution when deserializing XML payloads.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-42013", + "vendorProject": "Apache", + "product": "HTTP Server", + "vulnerabilityName": "Apache HTTP Server Path Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default \ufffdrequire all denied\ufffd or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-41773", + "vendorProject": "Apache", + "product": "HTTP Server", + "vulnerabilityName": "Apache HTTP Server Path Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default \ufffdrequire all denied\ufffd or if CGI scripts are enabled. The original patch issued under this CVE ID is insufficient, please review remediation information under CVE-2021-42013.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2019-0211", + "vendorProject": "Apache", + "product": "HTTP Server", + "vulnerabilityName": "Apache HTTP Server Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2016-4437", + "vendorProject": "Apache", + "product": "Shiro", + "vulnerabilityName": "Apache Shiro Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the \"remember me\" feature.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-17558", + "vendorProject": "Apache", + "product": "Solr", + "vulnerabilityName": "Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-17530", + "vendorProject": "Apache", + "product": "Struts", + "vulnerabilityName": "Apache Struts Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2017-5638", + "vendorProject": "Apache", + "product": "Struts", + "vulnerabilityName": "Apache Struts Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2018-11776", + "vendorProject": "Apache", + "product": "Struts", + "vulnerabilityName": "Apache Struts Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or wildcard namespace. Or, using URL tag which doesn\ufffdt have value and action set and in same time, its upper package configuration have no or wildcard namespace.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30858", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and macOS", + "vulnerabilityName": "Apple iOS, iPadOS, macOS Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and macOS WebKit contains a use-after-free vulnerability that may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-6223", + "vendorProject": "Apple", + "product": "iOS and macOS", + "vulnerabilityName": "Apple iOS and macOS Group Facetime Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS and macOS Group FaceTime contains an unspecified vulnerability where the call initiator can cause the recipient's Apple device to answer unknowingly or without user interaction.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30860", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Integer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, and watchOS CoreGraphics contain an integer overflow vulnerability which may allow code execution when processing a maliciously crafted PDF. The vulnerability is also known under the moniker of FORCEDENTRY.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-27930", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, and watchOS FontParser contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted front.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30807", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, and watchOS IOMobileFrameBuffer contain a memory corruption vulnerability which may allow an application to execute code with kernel privileges.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-27950", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Memory Initialization Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, and watchOS contain a memory initialization vulnerability that may allow a malicious application to disclose kernel memory.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-27932", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, and watchOS contain a type confusion vulnerability that may allow a malicious application to execute code with kernel privileges.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-9818", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and watchOS", + "vulnerabilityName": "Apple iOS, iPadOS, and watchOS Out-of-Bounds Write Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and watchOS Mail contains an out-of-bounds write vulnerability which may allow memory modification or application termination when processing a maliciously crafted mail message.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-9819", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and watchOS", + "vulnerabilityName": "Apple iOS, iPadOS, and watchOS Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and watchOS Mail contains a memory corruption vulnerability that may allow heap corruption when processing a maliciously crafted mail message.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30762", + "vendorProject": "Apple", + "product": "iOS", + "vulnerabilityName": "Apple iOS Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS WebKit contains a use-after-free vulnerability which may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1782", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Race Condition Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOs, macOS, watchOS, and tvOS contain a race condition vulnerability that may allow a malicious application to elevate privileges.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1870", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and macOS", + "vulnerabilityName": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic issue which may allow a remote attacker to execute code.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1871", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and macOS", + "vulnerabilityName": "Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic issue which may allow a remote attacker to execute code.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1879", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and watchOS", + "vulnerabilityName": "Apple iOS, iPadOS, and watchOS Cross-Site Scripting (XSS) Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and watchOS WebKit contains a cross-site scripting (XSS) vulnerability when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30661", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, watchOS, tvOS, and Safari WebKit Storage contain a use-after-free vulnerability which may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30666", + "vendorProject": "Apple", + "product": "iOS", + "vulnerabilityName": "Apple iOS Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS WebKit contains a buffer-overflow vulnerability which may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30713", + "vendorProject": "Apple", + "product": "macOS", + "vulnerabilityName": "Apple macOS Unspecified Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple macOS Transparency, Consent, and Control (TCC) contains an unspecified permissions issue which may allow a malicious application to bypass privacy preferences.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30657", + "vendorProject": "Apple", + "product": "macOS", + "vulnerabilityName": "Apple macOS Unspecified Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple macOS contains an unspecified logic issue in System Preferences that may allow a malicious application to bypass Gatekeeper checks.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30665", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, watchOS, and tvOS WebKit contain a memory corruption vulnerability which may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30663", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Integer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, tvOS, and Safari WebKit contain an integer overflow vulnerability which may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30761", + "vendorProject": "Apple", + "product": "iOS", + "vulnerabilityName": "Apple iOS Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS WebKit contains a memory corruption vulnerability which may allow for code execution when processing maliciously crafted web content.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30869", + "vendorProject": "Apple", + "product": "iOS, iPadOS, and macOS", + "vulnerabilityName": "Apple iOS, iPadOS, and macOS Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, and macOS contain a type confusion vulnerability in the XNU which may allow a malicious application to execute code with kernel privileges.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-9859", + "vendorProject": "Apple", + "product": "Multiple Products", + "vulnerabilityName": "Apple Multiple Products Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Apple iOS, iPadOS, macOS, watchOS, and tvOS contain an unspecified vulnerability that may allow an application to execute code with kernel privileges.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-20090", + "vendorProject": "Arcadyan", + "product": "Buffalo Firmware", + "vulnerabilityName": "Arcadyan Buffalo Firmware Path Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Arcadyan Buffalo firmware contains a path traversal vulnerability that could allow unauthenticated, remote attackers to bypass authentication and access sensitive information. This vulnerability affects multiple routers across several different vendors.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-27562", + "vendorProject": "Arm", + "product": "Trusted Firmware", + "vulnerabilityName": "Arm Trusted Firmware Out-of-Bounds Write Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Arm Trusted Firmware contains an out-of-bounds write vulnerability allowing the non-secure (NS) world to trigger a system halt, overwrite secure data, or print out secure data when calling secure functions under the non-secure processing environment (NSPE) handler mode. This vulnerability affects Yealink Device Management servers.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-28664", + "vendorProject": "Arm", + "product": "Mali Graphics Processing Unit (GPU)", + "vulnerabilityName": "Arm Mali Graphics Processing Unit (GPU) Unspecified Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Arm Mali Graphics Processing Unit (GPU) kernel driver contains an unspecified vulnerability that may allow a non-privileged user to gain write access to read-only memory, gain root privilege, corrupt memory, and modify the memory of other processes.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-28663", + "vendorProject": "Arm", + "product": "Mali Graphics Processing Unit (GPU)", + "vulnerabilityName": "Arm Mali Graphics Processing Unit (GPU) Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Arm Mali Graphics Processing Unit (GPU) kernel driver contains a use-after-free vulnerability that may allow a non-privileged user to make improper operations on GPU memory to gain root privilege, and\/or disclose information.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-3398", + "vendorProject": "Atlassian", + "product": "Confluence Server and Data Center", + "vulnerabilityName": "Atlassian Confluence Server and Data Center Path Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Atlassian Confluence Server and Data Center contain a path traversal vulnerability in the downloadallattachments resource that may allow a privileged, remote attacker to write files. Exploitation can lead to remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-26084", + "vendorProject": "Atlassian", + "product": "Confluence Server and Data Center", + "vulnerabilityName": "Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2019-11580", + "vendorProject": "Atlassian", + "product": "Crowd and Crowd Data Center", + "vulnerabilityName": "Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Atlassian Crowd and Crowd Data Center contain a remote code execution vulnerability resulting from a pdkinstall development plugin being incorrectly enabled in release builds.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-3396", + "vendorProject": "Atlassian", + "product": "Confluence Server and Data Server", + "vulnerabilityName": "Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Atlassian Confluence Server and Data Center contain a server-side template injection vulnerability that may allow an attacker to achieve path traversal and remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-42258", + "vendorProject": "BQE", + "product": "BillQuick Web Suite", + "vulnerabilityName": "BQE BillQuick Web Suite SQL Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-3452", + "vendorProject": "Cisco", + "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", + "vulnerabilityName": "Cisco ASA and FTD Read-Only Path Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-3580", + "vendorProject": "Cisco", + "product": "Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)", + "vulnerabilityName": "Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1497", + "vendorProject": "Cisco", + "product": "HyperFlex HX", + "vulnerabilityName": "Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the\ufffdroot\ufffduser.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1498", + "vendorProject": "Cisco", + "product": "HyperFlex HX", + "vulnerabilityName": "Cisco HyperFlex HX Data Platform Command Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco HyperFlex HX Installer Virtual Machine contains an insufficient input validation vulnerability which could allow an attacker to execute commands on an affected device as the tomcat8 user.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-0171", + "vendorProject": "Cisco", + "product": "IOS and IOS XE", + "vulnerabilityName": "Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco IOS and IOS XE Software improperly validates packet data, allowing an unauthenticated, remote attacker to trigger a reload of an affected device, cause a denial-of-service (DoS) condition, or perform code execution on the affected device.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-3118", + "vendorProject": "Cisco", + "product": "IOS XR", + "vulnerabilityName": "Cisco IOS XR Software Discovery Protocol Format String Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-3566", + "vendorProject": "Cisco", + "product": "IOS XR", + "vulnerabilityName": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-3569", + "vendorProject": "Cisco", + "product": "IOS XR", + "vulnerabilityName": "Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-3161", + "vendorProject": "Cisco", + "product": "Cisco IP Phones", + "vulnerabilityName": "Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with\ufffdroot\ufffdprivileges or cause a denial-of-service (DoS) condition.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-1653", + "vendorProject": "Cisco", + "product": "Small Business RV320 and RV325 Routers", + "vulnerabilityName": "Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-0296", + "vendorProject": "Cisco", + "product": "Adaptive Security Appliance (ASA)", + "vulnerabilityName": "Cisco Adaptive Security Appliance (ASA) Denial-of-Service Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Cisco Adaptive Security Appliance (ASA) contains an improper input validation vulnerability with HTTP URLs. Exploitation could allow an attacker to cause a denial-of-service (DoS) condition or information disclosure.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-13608", + "vendorProject": "Citrix", + "product": "StoreFront Server", + "vulnerabilityName": "Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Citrix StoreFront Server contains an XML External Entity (XXE) processing vulnerability that may allow an unauthenticated attacker to retrieve potentially sensitive information.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-8193", + "vendorProject": "Citrix", + "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", + "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an authorization bypass vulnerability that may allow unauthenticated access to certain URL endpoints. The attacker must have access to the NetScaler IP (NSIP) in order to perform exploitation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-8195", + "vendorProject": "Citrix", + "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", + "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-8196", + "vendorProject": "Citrix", + "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", + "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Information Disclosure Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an information disclosure vulnerability.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-19781", + "vendorProject": "Citrix", + "product": "Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance", + "vulnerabilityName": "Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2019-11634", + "vendorProject": "Citrix", + "product": "Workspace Application and Receiver for Windows", + "vulnerabilityName": "Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Citrix Workspace Application and Receiver for Windows contains remote code execution vulnerability resulting from local drive access preferences not being enforced into the clients' local drives.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-29557", + "vendorProject": "D-Link", + "product": "DIR-825 R1 Devices", + "vulnerabilityName": "D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-25506", + "vendorProject": "D-Link", + "product": "DNS-320 Device", + "vulnerabilityName": "D-Link DNS-320 Device Command Injection Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "D-Link DNS-320 device contains a command injection vulnerability in the sytem_mgr.cgi component that may allow for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-15811", + "vendorProject": "DotNetNuke (DNN)", + "product": "DotNetNuke (DNN)", + "vulnerabilityName": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-18325", + "vendorProject": "DotNetNuke (DNN)", + "product": "DotNetNuke (DNN)", + "vulnerabilityName": "DotNetNuke (DNN) Inadequate Encryption Strength Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "DotNetNuke (DNN) contains an inadequate encryption strength vulnerability resulting from the use of a weak encryption algorithm to protect input parameters. This CVE ID resolves an incomplete patch for CVE-2018-15811.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2017-9822", + "vendorProject": "DotNetNuke (DNN)", + "product": "DotNetNuke (DNN)", + "vulnerabilityName": "DotNetNuke (DNN) Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "DotNetNuke (DNN) contains a vulnerability that may allow for remote code execution via cookie deserialization.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2019-15752", + "vendorProject": "Docker", + "product": "Desktop Community Edition", + "vulnerabilityName": "Docker Desktop Community Edition Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Docker Desktop Community Edition contains a vulnerability that may allow local users to escalate privileges by placing a trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\\DockerDesktop\\version-bin\\.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-8515", + "vendorProject": "DrayTek", + "product": "Multiple Vigor Routers", + "vulnerabilityName": "Multiple DrayTek Vigor Routers Web Management Page Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-7600", + "vendorProject": "Drupal", + "product": "Drupal Core", + "vulnerabilityName": "Drupal Core Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Drupal Core contains a remote code execution vulnerability that could allow an attacker to exploit multiple attack vectors on a Drupal site, resulting in complete site compromise.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-22205", + "vendorProject": "GitLab", + "product": "Community and Enterprise Editions", + "vulnerabilityName": "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2018-6789", + "vendorProject": "Exim", + "product": "Exim", + "vulnerabilityName": "Exim Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Exim contains a buffer overflow vulnerability in the base64d function part of the SMTP listener that may allow for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-8657", + "vendorProject": "EyesOfNetwork", + "product": "EyesOfNetwork", + "vulnerabilityName": "EyesOfNetwork Use of Hard-Coded Credentials Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-8655", + "vendorProject": "EyesOfNetwork", + "product": "EyesOfNetwork", + "vulnerabilityName": "EyesOfNetwork Improper Privilege Management Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "EyesOfNetwork contains an improper privilege management vulnerability that may allow a user to run commands as root via a crafted Nmap Scripting Engine (NSE) script to nmap7.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-5902", + "vendorProject": "F5", + "product": "BIG-IP", + "vulnerabilityName": "F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "F5 BIG-IP Traffic Management User Interface (TMUI) contains a remote code execution vulnerability in undisclosed pages.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-22986", + "vendorProject": "F5", + "product": "BIG-IP and BIG-IQ Centralized Management", + "vulnerabilityName": "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-35464", + "vendorProject": "ForgeRock", + "product": "Access Management (AM)", + "vulnerabilityName": "ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (\/ccversion\/Version, \/ccversion\/Masthead, or \/ccversion\/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend).", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2019-5591", + "vendorProject": "Fortinet", + "product": "FortiOS", + "vulnerabilityName": "Fortinet FortiOS Default Configuration Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-12812", + "vendorProject": "Fortinet", + "product": "FortiOS", + "vulnerabilityName": "Fortinet FortiOS SSL VPN Improper Authentication Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2018-13379", + "vendorProject": "Fortinet", + "product": "FortiOS", + "vulnerabilityName": "Fortinet FortiOS SSL VPN Path Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-16010", + "vendorProject": "Google", + "product": "Chrome", + "vulnerabilityName": "Google Chrome for Android Heap Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chrome for Android contains a heap buffer overflow vulnerability that allows a remote attacker, who had compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-15999", + "vendorProject": "Google", + "product": "Chrome", + "vulnerabilityName": "Google Chrome Heap Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chrome uses FreeType, an open-source software library to render fonts, which contains a heap buffer overflow vulnerability in the function Load_SBit_Png when processing PNG images embedded into fonts. This vulnerability is part of an exploit chain with CVE-2020-17087 on Windows and CVE-2020-16010 on Android.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-21166", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Race Condition Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium contains a race condition vulnerability in audio which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-16017", + "vendorProject": "Google", + "product": "Chrome", + "vulnerabilityName": "Google Chrome Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chrome contains a use-after-free vulnerability within the site isolation component which allows a remote attacker, who had compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-37976", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Information Disclosure Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium contains an information disclosure vulnerability within the core memory component which allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-16009", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30632", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Out-of-Bounds Write Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-16013", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Incorrect Implementation Vulnerabililty", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains an incorrect implementation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30633", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Indexed DB API Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium Indexed DB API contains a use-after-free vulnerability that allows a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-21148", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Heap Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-37973", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium Portals contains a use-after-free vulnerability that allows a remote attacker, who had compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30551", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-37975", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-6418", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30554", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium WebGL contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-21206", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-38000", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Improper Input Validation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium Intents contains an improper input validation vulnerability that allows a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-38003", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine has a bug in JSON.stringify where the internal TheHole value can leak to script code causing memory corruption. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-21224", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-21193", + "vendorProject": "Google", + "product": "Chromium", + "vulnerabilityName": "Google Chromium Blink Use-After-Free Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium Blink contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-21220", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Improper Input Validation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30563", + "vendorProject": "Google", + "product": "Chromium V8 Engine", + "vulnerabilityName": "Google Chromium V8 Type Confusion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability affects web browsers that utilize Chromium, including Google Chrome and Microsoft Edge.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-4430", + "vendorProject": "IBM", + "product": "Data Risk Manager", + "vulnerabilityName": "IBM Data Risk Manager Directory Traversal Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "IBM Data Risk Manager contains a directory traversal vulnerability that could allow a remote authenticated attacker to traverse directories and send a specially crafted URL request to download arbitrary files from the system.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-4427", + "vendorProject": "IBM", + "product": "Data Risk Manager", + "vulnerabilityName": "IBM Data Risk Manager Security Bypass Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "IBM Data Risk Manager contains a security bypass vulnerability that could allow a remote attacker to bypass security restrictions when configured with SAML authentication. By sending a specially crafted HTTP request, an attacker could exploit this vulnerability to bypass the authentication process and gain full administrative access to the system.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-4428", + "vendorProject": "IBM", + "product": "Data Risk Manager", + "vulnerabilityName": "IBM Data Risk Manager Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "IBM Data Risk Manager contains an unspecified vulnerability which could allow a remote, authenticated attacker to execute commands on the system.\ufffd", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2019-4716", + "vendorProject": "IBM", + "product": "Planning Analytics", + "vulnerabilityName": "IBM Planning Analytics Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "IBM Planning Analytics is vulnerable to a configuration overwrite that allows an unauthenticated user to login as \"admin\", and then execute code as root or SYSTEM via TM1 scripting.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2016-3715", + "vendorProject": "ImageMagick", + "product": "ImageMagick", + "vulnerabilityName": "ImageMagick Arbitrary File Deletion Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2016-3718", + "vendorProject": "ImageMagick", + "product": "ImageMagick", + "vulnerabilityName": "ImageMagick Server-Side Request Forgery (SSRF) Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-15505", + "vendorProject": "Ivanti", + "product": "MobileIron Multiple Products", + "vulnerabilityName": "Ivanti MobileIron Multiple Products Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Ivanti MobileIron's Core & Connector, Sentry, and Monitor and Reporting Database (RDB) products contain an unspecified vulnerability that allows for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-30116", + "vendorProject": "Kaseya", + "product": "Virtual System\/Server Administrator (VSA)", + "vulnerabilityName": "Kaseya Virtual System\/Server Administrator (VSA) Information Disclosure Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Kaseya Virtual System\/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-7961", + "vendorProject": "Liferay", + "product": "Liferay Portal", + "vulnerabilityName": "Liferay Portal Deserialization of Untrusted Data Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Liferay Portal contains a deserialization of untrusted data vulnerability that allows remote attackers to execute code via JSON web services.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-23874", + "vendorProject": "McAfee", + "product": "McAfee Total Protection (MTP)", + "vulnerabilityName": "McAfee Total Protection (MTP) Improper Privilege Management Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "McAfee Total Protection (MTP) contains an improper privilege management vulnerability that allows a local user to gain elevated privileges and execute code, bypassing MTP self-defense.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-22506", + "vendorProject": "Micro Focus", + "product": "Micro Focus Access Manager", + "vulnerabilityName": "Micro Focus Access Manager Information Leakage Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Micro Focus Access Manager contains an information leakage vulnerability resulting from a SAML service provider redirection issue when the Assertion Consumer Service URL is used.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-22502", + "vendorProject": "Micro Focus", + "product": "Operation Bridge Reporter (OBR)", + "vulnerabilityName": "Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Micro Focus Operation Bridge Report (OBR) contains an unspecified vulnerability that allows for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2014-1812", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-38647", + "vendorProject": "Microsoft", + "product": "Open Management Infrastructure (OMI)", + "vulnerabilityName": "Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2016-0167", + "vendorProject": "Microsoft", + "product": "Win32k", + "vulnerabilityName": "Microsoft Win32k Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation via a crafted application", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2020-0878", + "vendorProject": "Microsoft", + "product": "Edge and Internet Explorer", + "vulnerabilityName": "Microsoft Edge and Internet Explorer Memory Corruption Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Edge and Internet Explorer contain a memory corruption vulnerability that allows attackers to execute code in the context of the current user.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2021-31955", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Kernel Information Disclosure Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Kernel contains an unspecified vulnerability that allows for information disclosure. Successful exploitation allows attackers to read the contents of kernel memory from a user-mode process.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-1647", + "vendorProject": "Microsoft", + "product": "Defender", + "vulnerabilityName": "Microsoft Defender Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Defender contains an unspecified vulnerability that allows for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-33739", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Desktop Window Manager (DWM) Core Library contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2016-0185", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Media Center Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Media Center contains a remote code execution vulnerability when Windows Media Center opens a specially crafted Media Center link (.mcl) file that references malicious code.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-0683", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Installer Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Installer contains a privilege escalation vulnerability when MSI packages process symbolic links, which allows attackers to bypass access restrictions to add or remove files.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-17087", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Kernel Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-33742", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows MSHTML Platform Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-31199", + "vendorProject": "Microsoft", + "product": "Enhanced Cryptographic Provider", + "vulnerabilityName": "Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-33771", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Kernel Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-31956", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows NTFS Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows New Technology File System (NTFS) contains an unspecified vulnerability that allows attackers to escalate privileges via a specially crafted application.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-31201", + "vendorProject": "Microsoft", + "product": "Enhanced Cryptographic Provider", + "vulnerabilityName": "Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Enhanced Cryptographic Provider contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-31979", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Kernel Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-0938", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-17144", + "vendorProject": "Microsoft", + "product": "Exchange Server", + "vulnerabilityName": "Microsoft Exchange Server Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-0986", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Kernel Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2020-1020", + "vendorProject": "Microsoft", + "product": "Windows", + "vulnerabilityName": "Microsoft Windows Adobe Font Manager Library Remote Code Execution Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Adobe Font Manager Library contains an unspecified vulnerability when handling specially crafted multi-master fonts (Adobe Type 1 PostScript format) that allows for remote code execution for all systems except Windows 10. For systems running Windows 10, an attacker who successfully exploited the vulnerability could execute code in an AppContainer sandbox context with limited privileges and capabilities.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2022-05-03", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-38645", + "vendorProject": "Microsoft", + "product": "Open Management Infrastructure (OMI)", + "vulnerabilityName": "Microsoft Open Management Infrastructure (OMI) Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Unknown", + "notes": "" + }, + { + "cveID": "CVE-2021-34523", + "vendorProject": "Microsoft", + "product": "Exchange Server", + "vulnerabilityName": "Microsoft Exchange Server Privilege Escalation Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.", + "requiredAction": "Apply updates per vendor instructions.", + "dueDate": "2021-11-17", + "knownRansomwareCampaignUse": "Known", + "notes": "" + }, + { + "cveID": "CVE-2017-7269", + "vendorProject": "Microsoft", + "product": "Internet Information Services (IIS)", + "vulnerabilityName": "Microsoft Windows Server Buffer Overflow Vulnerability", + "dateAdded": "2021-11-03", + "shortDescription": "Microsoft Windows Server 2003 R2 contains a buffer overflow vulnerability in Internet Information Services (IIS) 6.0 which allows remote attackers to execute code via a long header beginning with \"If: