Rosetta Intel

CVE-2024-5217

2024-07-29

ServiceNow Incomplete List of Disallowed Inputs Vulnerability

ServiceNow / Utah, Vancouver, and Washington DC Now Platform

ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely.

CWE-184

Refssupport.servicenow.com nvd.nist.gov

Federal remediation due 2024-08-19

CVE-2022-26871

2022-03-31

Trend Micro Apex Central Arbitrary File Upload Vulnerability

Trend Micro

An arbitrary file upload vulnerability in Trend Micro Apex Central could allow for remote code execution.

CWE-184

Refsnvd.nist.gov

Federal remediation due 2022-04-21

CVE-2021-42321

2021-11-17

Microsoft Exchange Server Remote Code Execution VulnerabilityRansomware

Microsoft

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

CWE-184 CWE-502 · Deserialization of untrusted data

Refsnvd.nist.gov

Federal remediation due 2021-12-01

KEV Catalog