An official Admiresty Corporation service
How to verify
Official Admiresty services use admiresty.co

Admiresty Corporation operates ThreatGrid and its full service ecosystem from admiresty.co. All official platforms run from this domain or a verified subdomain. If you’re unsure, visit admiresty.co directly to confirm.

Secure Admiresty services always use HTTPS

A padlock and https:// in your address bar confirm a safe, encrypted connection. Never enter credentials or share sensitive data on any page without a valid HTTPS connection to an Admiresty domain.

Security Bulletins

Active threat advisories and known exploited vulnerabilities.

Pulled daily from the CISA Known Exploited Vulnerabilities catalog. Every entry has confirmed active exploitation in the wild. Last synced Jul 29, 2026.

1,656 total bulletins 1,656 critical or high severity Source: CISA KEV + NVD
All 1,656 Critical 1,656 High 0 Medium 0 Low 0 1,656 entries
Critical CVE-2019-7238 Sonatype · Nexus Repository Manager Added Dec 10, 2021

Sonatype Nexus Repository Manager Incorrect Access Control Vulnerability

Sonatype Nexus Repository Manager before 3.15.0 has an incorrect access control vulnerability. Exploitation allows for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-0193 Apache · Solr Added Dec 10, 2021

Apache Solr DataImportHandler Code Injection Vulnerability

The optional Apache Solr module DataImportHandler contains a code injection vulnerability.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-44168 Fortinet · FortiOS Added Dec 10, 2021

Fortinet FortiOS Arbitrary File Download

Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2017-17562 Embedthis · GoAhead Added Dec 10, 2021

Embedthis GoAhead Remote Code Execution Vulnerability

Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2017-12149 Red Hat · JBoss Application Server Added Dec 10, 2021

Red Hat JBoss Application Server Remote Code Execution Vulnerability

The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2010-1871 Red Hat · JBoss Seam 2 Added Dec 10, 2021

Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability

JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2020-17463 Fuel CMS · Fuel CMS Added Dec 10, 2021

Fuel CMS SQL Injection Vulnerability

FUEL CMS 1.4.7 allows SQL Injection via the col parameter to /pages/items, /permissions/items, or /navigation/items.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2020-8816 Pi-hole · AdminLTE Added Dec 10, 2021

Pi-Hole AdminLTE Remote Code Execution Vulnerability

Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Execution by privileged dashboard users via a crafted DHCP static lease.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2019-10758 MongoDB · mongo-express Added Dec 10, 2021

MongoDB mongo-express Remote Code Execution Vulnerability

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-44228 Apache · Log4j2 Added Dec 10, 2021

Apache Log4j2 Remote Code Execution Vulnerability

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2020-11261 Qualcomm · Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables Added Dec 1, 2021

Qualcomm Multiple Chipsets Improper Input Validation Vulnerability

Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2018-14847 MikroTik · RouterOS Added Dec 1, 2021

MikroTik Router OS Directory Traversal Vulnerability

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-37415 Zoho · ManageEngine ServiceDesk Plus (SDP) Added Dec 1, 2021

Zoho ManageEngine ServiceDesk Authentication Bypass Vulnerability

Zoho ManageEngine ServiceDesk Plus before 11302 is vulnerable to authentication bypass that allows a few REST-API URLs without authentication

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-40438 Apache · Apache Added Dec 1, 2021

Apache HTTP Server-Side Request Forgery (SSRF)

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-44077 Zoho · ManageEngine ServiceDesk Plus (SDP) / SupportCenter Plus Added Dec 1, 2021

Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability

Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-22204 Perl · Exiftool Added Nov 17, 2021

ExifTool Remote Code Execution Vulnerability

Improper neutralization of user data in the DjVu file format in Exiftool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-40449 Microsoft · Windows Added Nov 17, 2021

Microsoft Windows Win32k Privilege Escalation Vulnerability

Unspecified vulnerability allows for an authenticated user to escalate privileges.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-42321 Microsoft · Exchange Added Nov 17, 2021

Microsoft Exchange Server Remote Code Execution Vulnerability

An authenticated attacker could leverage improper validation in cmdlet arguments within Microsoft Exchange and perform remote code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-42292 Microsoft · Office Added Nov 17, 2021

Microsoft Excel Security Feature Bypass

A security feature bypass vulnerability in Microsoft Excel would allow a local user to perform arbitrary code execution.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-27104 Accellion · FTA Added Nov 3, 2021

Accellion FTA OS Command Injection Vulnerability

Accellion FTA contains an OS command injection vulnerability exploited via a crafted POST request to various admin endpoints.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-27102 Accellion · FTA Added Nov 3, 2021

Accellion FTA OS Command Injection Vulnerability

Accellion FTA contains an OS command injection vulnerability exploited via a local web service call.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-27101 Accellion · FTA Added Nov 3, 2021

Accellion FTA SQL Injection Vulnerability

Accellion FTA contains a SQL injection vulnerability exploited via a crafted host header in a request to document_root.html.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-27103 Accellion · FTA Added Nov 3, 2021

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion FTA contains a server-side request forgery (SSRF) vulnerability exploited via a crafted POST request to wmProgressstat.html.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-21017 Adobe · Acrobat and Reader Added Nov 3, 2021

Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability

Acrobat Acrobat and Reader contain a heap-based buffer overflow vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed
Critical CVE-2021-28550 Adobe · Acrobat and Reader Added Nov 3, 2021

Adobe Acrobat and Reader Use-After-Free Vulnerability

Adobe Acrobat and Reader contains a use-after-free vulnerability that could allow an unauthenticated attacker to achieve code execution in the context of the current user.

NVD Detail ↗ CISA KEV ↗ Patch deadline passed

Need help prioritizing these vulnerabilities?

ThreatGrid can assess your environment and map active CVEs to your monitored assets.