2021-12-11

2021-12-12

2021-12-13

All (2) Critical (2) High (1) Medium (1)

CVE-2021-44833 CRITICAL POC PATCH Act Now

The CLI 1.0.0 for Amazon AWS OpenSearch has weak permissions for the configuration file. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Privilege Escalation Aws Opensearch

NVD GitHub

CVSS 3.1

9.8

EPSS

1.6%

CVE-2021-44515 CRITICAL POC KEV THREAT Act Now

Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

RCE Zoho Authentication Bypass Manageengine Desktop Central

NVD

CVSS 3.1

9.8

EPSS

99.9%