Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- debian linux, linux kernel, google android +3 more +5 more HID: core: zero-initialize the report buffer 5.5 Medium
- progress whatsup gold WhatsUp Gold GetFileWithoutZip Directory Traversal Remote Code Execution Vulnerability 9.8 Critical
- cisco small business rv series router firmware, rv016 firmware, rv042 firmware +5 more +7 more A vulnerability in the web-based management interface of Cisco Small Business Routers RV016,... 6.5 Medium
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 more Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions 8.6 High
- hitachi vantara pentaho business analytics server, hitachi vantara pentaho business analytics server, pentaho business analytics (ba) server +2 more Hitachi Vantara Pentaho Business Analytics Server - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) 8.8 High
- microsoft windows, windows 10, windows 10 servers +15 more +17 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft partner center Partner.Microsoft.Com Elevation of Privilege Vulnerability 8.7 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker... 9.0 Critical
- oracle agile product lifecycle management (plm), agile plm framework, agile product lifecycle management +2 more Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export). The... 8.8 High
- adobe coldfusion Adobe ColdFusion 2016 Update 3 and earlier, ColdFusion 11 update 11 and earlier, ColdFusion 10... 9.8 Critical
- microsoft power pages Microsoft Power Pages Elevation of Privilege Vulnerability 8.2 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface 7.1 High
- craft cms cms, craftcms craft cms +1 more Potential RCE with a compromised security key in craft/cms 8.1 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authentication Bypass in the Management Web Interface 8.8 High
- sonicwall sonicos An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote... 9.8 Critical
- simple-help simplehelp SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal... 7.5 High
- apple ipados, ios and ipados, iphone os +2 more An authorization issue was addressed with improved state management. This issue is fixed in... 6.1 Medium
- mitel sip phones, 6863i sip firmware, 6865i sip firmware +14 more +16 more A vulnerability in the Mitel 6800 Series, 6900 Series, and 6900w Series SIP Phones, including the... 7.2 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +32 more +34 more Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Storage Elevation of Privilege Vulnerability 7.1 High
- zyxel vmg4325-b10a firmware, dsl cpe devices, sbg3300-n000 firmware +12 more +14 more **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the... 8.8 High
- zyxel vmg4325-b10a firmware, dsl cpe devices, sbg3300-n000 firmware +12 more +14 more **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the CGI... 8.8 High
- trimble cityworks, cityworks (with office companion) +1 more Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to... 8.6 High
- 7-zip, netapp active iq unified manager +1 more 7-Zip Mark-of-the-Web Bypass Vulnerability 7.0 High
- microsoft 365 apps, 365 apps for enterprise, office 2016 +4 more +6 more Microsoft Outlook Remote Code Execution Vulnerability 9.8 Critical
- audinate dante discovery, dante application library +1 more mDNSResponder.exe is vulnerable to DLL Sideloading attack. Executable improperly specifies how to... 7.8 High
- sophos cyberoamos An SQL injection vulnerability in the WebAdmin of Cyberoam OS through 2020-12-04 allows... 9.8 Critical
- sophos xg firewall, xg firewall firmware +1 more Sophos XG Firewall 17.x through v17.5 MR12 allows a Buffer Overflow and remote code execution via... 9.8 Critical
- debian linux, linux kernel +1 more media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format 7.8 High
- apache ofbiz Apache OFBiz: Confused controller-view authorization logic (forced browsing) 7.5 High
- microsoft .net framework, .net framework 2.0 service pack 2, .net framework 3.0 service pack 2 +9 more +11 more .NET Framework Information Disclosure Vulnerability 7.5 High
- paessler prtg network monitor PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users... 9.8 Critical
- paessler prtg network monitor An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the... 7.2 High
- apple ipados, macos, tvos +5 more +7 more A use after free issue was addressed with improved memory management. This issue is fixed in... 10.0 Critical
- sonicwall sma1000, sma1000 appliances, sma6200 firmware +7 more +9 more Pre-authentication deserialization of untrusted data vulnerability has been identified in the... 9.8 Critical
- jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery 6.9 Medium
- aviatrix controller, controllers +1 more An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to... 10.0 Critical
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 more Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 more Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 21h2, windows 10 version 22h2 +13 more +15 more Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability 7.8 High
- fortinet fortios, fortiproxy, fortios and fortiproxy +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting... 9.6 Critical
- beyondtrust privileged remote access (pra) and remote support (rs), privileged remote access, remote support +1 more +3 more Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) 6.6 Medium
- qlik sense Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code... 9.6 Critical
- ivanti connect secure, neurons for zta gateways, policy secure +2 more +4 more A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy... 9.0 Critical
- mitel micollab Mitel MiCollab through 9.8 SP2 could allow an authenticated attacker with administrative... 2.7 Low
- mitel micollab A vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8... 9.1 Critical
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 9.8 Critical
- palo alto networks pan-os, cloud ngfw, paloaltonetworks prisma access +2 more PAN-OS: Firewall Denial of Service (DoS) in DNS Security Using a Specially Crafted Packet 8.7 High
- acclaim systems usaherds Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials. 8.1 High
- beyondtrust privileged remote access, privileged remote access (pra) and remote support (rs), remote support +2 more Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA) 9.8 Critical
- Show olderLoading…