Security Briefs
Page 19 of 21.
Alerts tracked
2627
Security flaws we track for Upstate SC businesses.
Known exploited
503
On CISA’s list of vulnerabilities attackers are actively using. Patch these first.
New exploited this month
43
Fresh additions to that CISA list since the first of the month.Feeds last synced Aug 20, 2026, 6:00 AM UTC.
Showing page 19 (24 alerts) of 503.
Microsoft MSHTML Remote Code Execution Vulnerability
Microsoft MSHTML is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-40444). Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft Open Management Infrastructure (OMI) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-38647). Microsoft Open Management Infrastructure (OMI) within Azure VM Management Extensions contains an unspecified vulnerability allowing remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-36955). Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-36942). Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability allowing an unauthenticated attacker to call a method on the LSARPC interface and coerce the domain controller to authenticate against another server using NTLM. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability
ForgeRock Access Management (AM) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-35464). ForgeRock Access Management (AM) Core Server allows an attacker who sends a specially crafted HTTP request to one of three endpoints (/ccversion/Version, /ccversion/Masthead, or /ccversion/ButtonFrame) to execute code in the context of the current user (unless ForgeRock AM is running as root user, which the vendor does not recommend). CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
SolarWinds Serv-U Remote Code Execution Vulnerability
SolarWinds Serv-U is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-35211). SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Windows Print Spooler Remote Code Execution Vulnerability
Microsoft Windows is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-34527). Microsoft Windows Print Spooler contains an unspecified vulnerability due to the Windows Print Spooler service improperly performing privileged file operations. Successful exploitation allows an attacker to perform remote code execution with SYSTEM privileges. The vulnerability is also known under the moniker of PrintNightmare. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-34523). Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-34473). Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-31207). Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Kaseya Virtual System/Server Administrator (VSA) is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-30116). Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Accellion FTA OS Command Injection Vulnerability
Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27104). Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27103). Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Accellion FTA OS Command Injection Vulnerability
Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27102). Accellion FTA contains an OS command injection vulnerability exploited via a local web service call. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Accellion FTA SQL Injection Vulnerability
Accellion FTA is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27101). Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-27065). Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-26858). Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-26857). Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-26855). Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-26411). Microsoft Internet Explorer contains an unspecified vulnerability that allows for memory corruption. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability
Atlassian Confluence Server and Data Center is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-26084). Atlassian Confluence Server and Data Server contain an Object-Graph Navigation Language (OGNL) injection vulnerability that may allow an unauthenticated attacker to execute code. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability
F5 BIG-IP and BIG-IQ Centralized Management is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22986). F5 BIG-IP and BIG-IQ Centralized Management contain a remote code execution vulnerability in the iControl REST interface that allows unauthenticated attackers with network access to execute system commands, create or delete files, and disable services. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.
Ivanti Pulse Connect Secure Use-After-Free Vulnerability
Ivanti Pulse Connect Secure is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22893). Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services. CISA remediation due date: 2022-05-03. If you need help checking exposure, call (864) 335-9223.
GitLab Community and Enterprise Editions Remote Code Execution Vulnerability
GitLab Community and Enterprise Editions is listed in CISA's Known Exploited Vulnerabilities catalog (CVE-2021-22205). GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Workhorse are vulnerable to remote code execution. Workhorse passes image file extensions through ExifTool, which improperly validates the image files. CISA remediation due date: 2021-11-17. If you need help checking exposure, call (864) 335-9223.