Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- telemessage archiving backend, tm sgnl, text message archiver +2 more The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM... 1.9 Low
- geovision gv-dsp lpr firmware, gv-dsp lpr v3, gv-dsp lpr v3 firmware +10 more +12 more GeoVision EOL devices - OS Command Injection 9.8 Critical
- geovision gv vs04a, gv vs04h, gv-bx130 firmware +56 more +58 more GeoVision EOL device - OS Command Injection 9.8 Critical
- freetype, debian linux +1 more An out of bounds write exists in FreeType versions 2.13.0 and below when attempting to parse font... 8.1 High
- langflow Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code 9.8 Critical
- commvault command center, command center innovation release, commvault +2 more Commvault Command Center Innovation Release <= 11.38.25 Unathenticated Install Package Path Traversal 9.3 Critical
- yiiframework yii yiisoft/yii2 Mishandles the Attaching of Behavior Defined by a `__class` Array Key 9.0 Critical
- apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 more Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path. 9.1 Critical
- sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a... 7.2 High
- sap netweaver, sap se netweaver (visual composer development server) +1 more Missing Authorization check in SAP NetWeaver (Visual Composer development server) 10.0 Critical
- commvault, commvault web server +1 more Commvault Web Server unspecified vulnerability 8.7 High
- broadcom brocade fabric os, brocade fabric os, broadcom fabric operating system +2 more Code injection exposure in Fabric OS 9.1.0 through 9.1.1d6 8.6 High
- qualitia active! mail, qualitia co., ltd. active! mail 6, qualitia active\! mail +2 more Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow... 9.8 Critical
- apple ipados, macos, tvos +4 more +6 more This issue was addressed by removing the vulnerable code. This issue is fixed in tvOS 18.4.1,... 9.8 Critical
- apple ipados, macos, tvos +5 more +7 more A memory corruption issue was addressed with improved bounds checking. This issue is fixed in... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 more NTLM Hash Disclosure Spoofing Vulnerability 6.5 Medium
- sonicwall sma100, sma100 appliances, sma 200 firmware +4 more +6 more Improper neutralization of special elements in the SMA100 management interface allows a remote... 6.5 Medium
- debian linux, linux kernel +1 more ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices 7.8 High
- debian linux, linux kernel +1 more ALSA: usb-audio: Fix out of bounds reads when finding clock sources 7.1 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- gladinet centrestack Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization... 9.0 Critical
- crushftp CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the... 9.8 Critical
- ivanti connect secure, policy secure, connect secure, policy secure, and zta gateways +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy... 9.0 Critical
- apache tomcat, debian linux, netapp bootstrap os +2 more Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical
- cisco smart licensing utility, smart license utility +1 more A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker... 9.8 Critical
- google chrome, chromium mojo +1 more Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior... 8.3 High
- sitecore cms, cms and experience platform (xp) +1 more Deserialization of Untrusted Data in the anti CSRF module in Sitecore through 9.1 allows an... 8.8 High
- sitecore cms, cms and experience platform (xp), experience platform +2 more Deserialization of Untrusted Data in the Sitecore.Security.AntiCSRF (aka anti CSRF) module in... 9.8 Critical
- reviewdog action-ast-grep, action-composite-template, action-setup +5 more +7 more Multiple Reviewdog actions were compromised during a specific time period 8.6 High
- edimax ic-7100 ip camera, ic-7100 firmware +1 more Edimax IC-7100 IP Camera OS Command Injection 9.3 Critical
- nakivo backup & replication director, backup and replication, backup \& replication director +2 more NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files... 8.6 High
- sap netweaver, netweaver application server java +1 more Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP... 7.5 High
- tj-actions changed-files, changed-files github action +1 more tj-actions changed-files through 45.0.7 allows remote attackers to discover secrets by reading actions logs. 8.6 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting... 8.1 High
- juniper junos, junos os +1 more Junos OS: An local attacker with shell access can execute arbitrary code 6.7 Medium
- apple ipados, macos, safari +6 more +8 more An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions.... 10.0 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Microsoft Management Console Security Feature Bypass Vulnerability 7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows NTFS Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows NTFS Information Disclosure Vulnerability 5.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows Fast FAT File System Driver Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +28 more +30 more Windows NTFS Information Disclosure Vulnerability 4.6 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +13 more +15 more Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability 7.0 High
- advantive veracore A SQL injection vulnerability in timeoutWarning.asp in Advantive VeraCore through 2025.1.0 allows... 5.8 Medium
- advantive veracore Advantive VeraCore before 2024.4.2.1 allows remote authenticated users to upload files to... 9.9 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... 9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... 9.8 Critical
- ivanti endpoint manager, endpoint manager (epm) +1 more Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6... 9.8 Critical
- vmware esxi, esxi, workstation, and fusion, fusion +4 more +6 more VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an... 7.1 High
- vmware esxi, cloud foundation, telco cloud infrastructure +1 more +3 more VMware ESXi contains an arbitrary write vulnerability. A malicious actor with privileges within... 8.2 High
- vmware esxi, workstation, cloud foundation +3 more +5 more VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that... 9.3 Critical
- Show olderLoading…