cwe-287
Safeguard articles tagged "cwe-287" — guides, analysis, and best practices for software supply chain and application security.
48 articles
CVE-2020-0688: Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
CVE-2020-0688 affects Microsoft Exchange Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-34523: Microsoft Exchange Server Privilege Escalation Vulnerability
CVE-2021-34523 affects Microsoft Exchange Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2020-12812: Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
CVE-2020-12812 affects Fortinet FortiOS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-33766: Microsoft Exchange Server Information Disclosure
CVE-2021-33766 affects Microsoft Exchange Server and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-18.
CVE-2021-32648: October CMS Improper Authentication
CVE-2021-32648 affects October CMS October CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-01-18.
CVE-2020-5849: Unraid Authentication Bypass Vulnerability
CVE-2020-5849 affects Unraid Unraid and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2021-22893: Ivanti Pulse Connect Secure Use-After-Free Vulnerability
CVE-2021-22893 affects Ivanti Pulse Connect Secure and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2019-0543: Microsoft Windows Privilege Escalation Vulnerability
CVE-2019-0543 affects Microsoft Windows and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-03-15.
CVE-2015-1187: D-Link and TRENDnet Multiple Devices Remote Code Execution Vulnerability
CVE-2015-1187 affects D-Link and TRENDnet Multiple Devices and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-03-25.
CVE-2018-10561: Dasan GPON Routers Authentication Bypass Vulnerability
CVE-2018-10561 affects Dasan Gigabit Passive Optical Network (GPON) Routers and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-03-31.
CVE-2021-39226: Grafana Authentication Bypass Vulnerability
CVE-2021-39226 affects Grafana Labs Grafana and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-08-25.
CVE-2021-27878: Veritas Backup Exec Agent Command Execution Vulnerability
CVE-2021-27878 affects Veritas Backup Exec Agent and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-04-07.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.