Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page.
// weekly digest
Loading…
Loading…
// weekly digest
// weekly digest
2021-11-01 00:00 UTC 2021-11-07 23:59 UTC
// total
0
// critical
0
// high
0
// medium
0
// low
0
// new kev
287
// top critical
No CRITICAL CVEs published this week.
// top high
No HIGH CVEs published this week.
// new kev additions
Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page.
Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified vulnerability that could allow an unauthenticated attacker to perform code execution.
Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution.
Microsoft Internet Explorer contains an unspecified vulnerability that allows for remote code execution.
Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.
DrayTek Vigor3900, Vigor2960, and Vigor300B routers contain an unspecified vulnerability that allows for remote code execution.
EyesOfNetwork contains a use of hard-coded credentials vulnerability, as it uses the same API key by default. Exploitation allows an attacker to calculate or guess the admin access token.
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
Apache Struts Jakarta Multipart parser allows for malicious file upload using the Content-Type value, leading to remote code execution.
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.