MP
Product
Manager Proxy
On CISA KEVExploited in the wildRansomware-linked
19
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 10Medium 7Low 1
Watch
Add Manager Proxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: 2.1 |
| CVE-2026-31431 In wildKEV | 7.8 | Apr 22 | crypto: algif_aead - Revert to operating out-of-place Affected: 4.0; 4.1; 4.2; 4.3 |
| CVE-2021-4034 RansomwareIn wildKEV | 7.8 | Jan 28 | Red Hat Polkit Out-of-Bounds Read and Write Vulnerability Affected: 4.1 |
| CVE-2016-3715 In wildKEV | 5.5 | May 5 | ImageMagick Arbitrary File Deletion Vulnerability Affected: 2.1 |
| CVE-2016-3718 In wildKEV | 5.5 | May 5 | ImageMagick Server-Side Request Forgery (SSRF) Vulnerability Affected: 2.1 |
| CVE-2016-1286 | 8.6 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted signature… Affected: 2.1 |
| CVE-2022-27239 | 7.8 | Apr 27 | In cifs-utils through 6.14, a stack-based buffer overflow when parsing the mount.cifs ip= command-line argument could lead to local attackers gaining root privileges Affected: 4.1; 4.2; 4.3 |
| CVE-2015-5300 | 7.5 | Jul 21 | The panic_gate check in NTP before 4.2.8p5 is only re-enabled after the first change to the system clock that was greater than 128 milliseconds by default, which allows remote… Affected: 2.1 |
| CVE-2015-5219 | 7.5 | Jul 21 | The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a… Affected: 2.1 |
| CVE-2015-5194 | 7.5 | Jul 21 | The log_config_command function in ntp_parser.y in ntpd in NTP before 4.2.7p42 allows remote attackers to cause a denial of service (ntpd crash) via crafted logconfig commands Affected: 2.1 |
| CVE-2016-4957 | 7.5 | Jul 5 | ntpd in NTP before 4.2.8p8 allows remote attackers to cause a denial of service (daemon crash) via a crypto-NAK packet Affected: 2.1 |
| CVE-2016-4954 | 7.5 | Jul 5 | The process_packet function in ntp_proto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (peer-variable modification) by sending spoofed… Affected: 2.1 |
| CVE-2016-4953 | 7.5 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (ephemeral-association demobilization) by sending a spoofed crypto-NAK packet with incorrect… Affected: 2.1 |
| CVE-2016-1285 | 6.8 | Mar 9 | named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause… Affected: 2.1 |
| CVE-2016-4955 | 5.9 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a… Affected: 2.1 |
| CVE-2016-0264 | 5.6 | May 24 | Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40… Affected: 2.1 |
| CVE-2016-4956 | 5.3 | Jul 5 | ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet Affected: 2.1 |
| CVE-2015-7976 | 4.3 | Jan 30 | The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause… Affected: 2.1 |
| CVE-2017-7995 | 3.8 | May 3 | Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure Affected: 2.1 |
Showing 19