Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- apple ipados, macos, safari +8 more +10 more The issue was addressed with improved checks. This issue is fixed in iOS 17.5 and iPadOS 17.5,... 5.5 Medium
- wordpress, wordpress core +1 more WordPress Core 4.7.0 - 7.1.3 - Unauthenticated Upgrade-Window Staged-Installer Remote Code Execution 8.1 High
- ivanti connect secure Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6... 4.3 Medium
- ivanti connect secure Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache... 7.0 High
- cisco secure firewall adaptive security appliance (asa) software, secure firewall threat defense (ftd) software, secure firewall threat defense +2 more +4 more Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability 8.6 High
- gitlab, gitlab community edition and enterprise edition, ruby-lang ruby +2 more Integer Overflow or Wraparound in GitLab 10.0 Critical
- broadcom vmware esx, vmware esx, cloud foundation +3 more +5 more ESX insufficient logging vulnerability 2.7 Low
- linux kernel, linux, red hat nvidia for rhel 10 +38 more +40 more net: skbuff: preserve shared-frag marker during coalescing 7.8 High
- adobe commerce, commerce b2b, commerce events +5 more +7 more Adobe Commerce | Unrestricted Upload of File with Dangerous Type (CWE-434) 9.3 Critical
- andybalholm brotli, 7-zip p7zip, anthropic bun +36 more +38 more Out-of-Bounds Write in Google Brotli Decoder 9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +62 more +64 more RCE via stale global state 9.2 Critical
- php, paloaltonetworks pan-os, panorama virtual appliance +61 more +63 more RCE via OOM corruption 9.2 Critical
- redhat richfaces JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL)... 6.8 Medium
- arista velocloud orchestrator Security Advisory 0199 9.4 Critical
- collabora online - built-in code server, online – built-in code server +1 more Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app,... 9.2 Critical
- e-guardian siteguard, eg secure solutions siteguard server edition, eg secure solutions inc. siteguard server edition for apache httpd +4 more +6 more SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an... 8.5 High
- plex media server Plex Media Server arbitrary file write 8.6 High
- plex media server Plex Media Server arbitrary-host SSRF 5.3 Medium
- plex media server Plex Media Server URL injection 6.9 Medium
- plex media server Plex Media Server SSRF 5.3 Medium
- siemens software center A vulnerability has been identified in Siemens Software Center (All versions). The affected... 8.4 High
- beyondtrust remote support Improper Origin Validation in Internal Messaging Components of BeyondTrust Remote Support 9.3 Critical
- fortinet fortios, fortipam, fortiproxy +4 more +6 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]... 5.4 Medium
- atlassian bamboo, bamboo data center, bitbucket data center +14 more +16 more h3. Summary This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira... 9.3 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface 8.6 High
- cisco secure email, secure email gateway, asyncos +2 more Cisco Secure Email Gateway Arbitrary File Write Vulnerability 9.8 Critical
- ahsay ahsaycbs, cloud backup suite +1 more Ahsay AhsayCBS Replication Receiver UpdateReceivers.do os command injection 10.0 Critical
- ahsay ahsaycbs, cloud backup suite +1 more Ahsay AhsayCBS API ApiStructsAction.java checkSysPwd improper authentication 6.9 Medium
- ivanti connect secure Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated... 8.6 High
- thymeleaf Thymeleaf: Improper recognition of unauthorized syntax patterns in sandboxed Thymeleaf expressions 9.0 Critical
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 more Improper neutralization of specific syntax patterns for unauthorized expressions in Thymeleaf 9.1 Critical
- thymeleaf, red hat build of apache camel for spring boot 4, fuse 7 +7 more +9 more Improper restriction of the scope of accessible objects in Thymeleaf expressions 9.1 Critical
- strapi Strapi leaking sensitive user information by filtering on private fields 4.9 Medium
- onlyoffice document server, docs +1 more Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server... 9.8 Critical
- apache struts, huawei agile controller-campus firmware, anyoffice +17 more +19 more Apache Struts RCE Vulnerability 8.1 High
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 more named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to... 7.8 High
- proftpd, debian linux, fedoraproject fedora +2 more +4 more The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files... 10.0 High
- citrix netscaler, netscaler gateway, netscaler adc +2 more +4 more Memory overflow vulnerability leading to Denial of Service 8.7 High
- fortinet fortimail An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... 9.8 Critical
- zammad Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM package 8.5 High
- zammad Undisclosed RCE in Zammad v6.3 and higher 8.7 High
- cisco catalyst sd-wan manager Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability 9.8 Critical
- apple ipados, macos, ios and ipados +2 more +4 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 8.8 High
- citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 more Memory overflow vulnerability leading to Remote Code Execution or Denial of Service 9.5 Critical
- citrix netscaler, netscaler gateway, citrix netscaler adc +2 more +4 more A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands 9.5 Critical
- microsoft windows, edge (chromium-based), outlook.com +29 more +31 more Windows Shell Security Feature Bypass Vulnerability 8.8 High
- checkpoint quantum security gateway, quantum security management +1 more Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding 9.8 Critical
- mikrotik routeros SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS 6.9 Medium
- microsoft sharepoint, sharepoint server, sharepoint enterprise server 2016 +2 more +4 more Microsoft SharePoint Server Remote Code Execution Vulnerability 8.8 High
- adobe commerce, commerce b2b, commerce and magento +3 more +5 more Adobe Commerce | Incorrect Authorization (CWE-863) 9.1 Critical
- Show olderLoading…