Critical Vulnerabilities
Actively Exploited Critical
CVE-2020-16846: SaltStack Salt
SaltStack Salt allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt API…
Technology & Cybersecurity Intelligence
Tech News Hub
Curated security alerts, vulnerabilities, operating-system updates, cloud and AI news, and vendor advisories from trusted sources.
Last updated
17 Oct 2026, 8:11 AM
Next refresh
17 Oct 2026, 8:00 PM
Automatically refreshed twice daily
Critical Vulnerabilities
Actively Exploited Critical
CVE-2019-8394: Zoho ManageEngine
Zoho ManageEngine ServiceDesk Plus (SDP) contains an unspecified vulnerability that allows remote users to upload files via login page customization. Required action: Apply updates…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2017-9248: Progress ASP.NET AJAX and Sitefinity
Progress Telerik UI for ASP.NET AJAX and Sitefinity have a cryptographic weakness in Telerik.Web.UI.dll that can be exploited to disclose encryption keys (Telerik.Web.UI.DialogParametersEncryptionKey and/or…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2021-22005: VMware vCenter Server
VMware vCenter Server contains a file upload vulnerability in the Analytics service that allows a user with network access to port 443 to execute…
Critical Vulnerabilities
Actively Exploited Critical
CVE-2016-3643: SolarWinds Virtualization Manager
SolarWinds Virtualization Manager allows for privilege escalation through leveraging a misconfiguration of sudo. Required action: Apply updates per vendor instructions.