Security Briefs
Page 107 of 111.
Alerts tracked
2651
Security flaws we track for Upstate SC businesses.
Known exploited
504
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
60
Fresh additions to that CISA list since the first of the month.Feeds last synced Aug 24, 2026, 6:00 AM UTC.
Showing page 107 (24 alerts) of 2651.
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2015-1701). An unspecified vulnerability exists in the Win32k.sys kernel-mode driver in Microsoft Windows Server that allows a local attacker to execute arbitrary code with elevated privileges. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle Java SE is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2012-4681). The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle Java SE is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2012-1723). Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Oracle Java SE is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2012-0507). An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.
Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability
Adobe Reader and Acrobat is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2010-0188). Unspecified vulnerability in Adobe Reader and Acrobat allows attackers to cause a denial of service or possibly execute arbitrary code. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.
Adobe Reader and Acrobat Input Validation Vulnerability
Adobe Acrobat and Reader is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2008-2992). Adobe Acrobat and Reader contain an input validation issue in a JavaScript method that could potentially lead to remote code execution. CISA remediation due date: 2022-03-24. If you need help checking exposure, call (864) 335-9223.
Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor Zimbra Collaborate Suite (ZCS) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-24682). Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting (XSS) vulnerability in the Calendar feature that allows an attacker to execute arbitrary code. CISA remediation due date: 2022-03-11. If you need help checking exposure, call (864) 335-9223.
Microsoft Internet Explorer Type Confusion Vulnerability
Microsoft Internet Explorer is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-0752). A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer CISA remediation due date: 2022-08-15. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-8174). A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka "Windows VBScript Engine Remote Code Execution" CISA remediation due date: 2022-08-15. If you need help checking exposure, call (864) 335-9223.
WinRAR Absolute Path Traversal Vulnerability
RARLAB WinRAR is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-20250). WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution CISA remediation due date: 2022-08-15. If you need help checking exposure, call (864) 335-9223.
Adobe Flash Player Use-After-Free Vulnerability
Adobe Flash Player is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-15982). Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability CISA remediation due date: 2022-08-15. If you need help checking exposure, call (864) 335-9223.
Microsoft SMBv3 Remote Code Execution Vulnerability
Microsoft SMBv3 is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2020-0796). A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests. An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target server or client. CISA remediation due date: 2022-08-10. If you need help checking exposure, call (864) 335-9223.
Oracle Corporation WebLogic Server Remote Code Execution Vulnerability
Oracle WebLogic Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2017-10271). Oracle Corporation WebLogic Server contains a vulnerability that allows for remote code execution. CISA remediation due date: 2022-08-10. If you need help checking exposure, call (864) 335-9223.
Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft SMBv1 is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2017-0145). The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. CISA remediation due date: 2022-08-10. If you need help checking exposure, call (864) 335-9223.
Microsoft SMBv1 Remote Code Execution Vulnerability
Microsoft SMBv1 is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2017-0144). The SMBv1 server in multiple Microsoft Windows versions allows remote attackers to execute arbitrary code via crafted packets. CISA remediation due date: 2022-08-10. If you need help checking exposure, call (864) 335-9223.
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2022-21882). Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. CISA remediation due date: 2022-02-18. If you need help checking exposure, call (864) 335-9223.
SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability
SonicWall SMA 100 Appliances is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-20038). SonicWall SMA 100 devies are vulnerable to an unauthenticated stack-based buffer overflow vulnerability where exploitation can result in code execution. CISA remediation due date: 2022-02-11. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2020-0787). Microsoft Windows BITS is vulnerable to to a privilege elevation vulnerability if it improperly handles symbolic links. An actor can exploit this vulnerability to execute arbitrary code with system-level privileges. CISA remediation due date: 2022-07-28. If you need help checking exposure, call (864) 335-9223.
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-8453). Microsoft Windows Win32k contains a vulnerability that allows an attacker to escalate privileges. CISA remediation due date: 2022-07-21. If you need help checking exposure, call (864) 335-9223.
VMware Server Side Request Forgery in vRealize Operations Manager API vulnerability
VMware vRealize Operations Manager API is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-21975). Server Side Request Forgery (SSRF) in vRealize Operations Manager API prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API to perform a SSRF attack to steal administrative credentials. CISA remediation due date: 2022-02-01. If you need help checking exposure, call (864) 335-9223.
Oracle WebLogic Server, Injection vulnerability
Oracle WebLogic Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-2725). Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). CISA remediation due date: 2022-07-10. If you need help checking exposure, call (864) 335-9223.
Palo Alto Networks PAN-OS Remote Code Execution Vulnerability
Palo Alto Networks PAN-OS is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-1579). Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled. CISA remediation due date: 2022-07-10. If you need help checking exposure, call (864) 335-9223.
Microsoft Win32k Privilege Escalation Vulnerability
Microsoft Win32k is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2019-1458). A privilege escalation vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k EoP. CISA remediation due date: 2022-07-10. If you need help checking exposure, call (864) 335-9223.
Fortinet FortiOS and FortiProxy Out-of-bounds Write vulnerability
Fortinet FortiOS and FortiProxy is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2018-13383). A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users. CISA remediation due date: 2022-07-10. If you need help checking exposure, call (864) 335-9223.