Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- reolink rlc-410w ip camera, rlc-410w firmware +1 more An OS command injection vulnerability exists in the device network settings functionality of... 9.1 Critical
- nuuo nvrmini2 devices, nvrmini2 firmware +1 more NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive,... 9.8 Critical
- reolink c1 pro firmware, c2 pro firmware, multiple ip cameras +3 more +5 more On Reolink RLC-410W, C1 Pro, C2 Pro, RLC-422W, and RLC-511W devices through 1.0.227, an... 7.2 High
- nuuo nvrmini devices, nvrmini firmware +1 more upgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell... 9.8 Critical
- cleo harmony, lexicom, vltrader +1 more +3 more In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +30 more +32 more Windows Kernel-Mode Driver Elevation of Privilege Vulnerability 7.8 High
- adobe coldfusion ColdFusion | Improper Access Control (CWE-284) 7.4 High
- cleo harmony, lexicom, vltrader +1 more +3 more In Cleo Harmony before 5.8.0.20, VLTrader before 5.8.0.20, and LexiCom before 5.8.0.20, there is... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- cyberpanel getresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb... 10.0 Critical
- zyxel atp series firmware, usg flex 50(w) series firmware, usg flex series firmware +7 more +9 more A directory traversal vulnerability in the web management interface of Zyxel ATP series firmware... 7.5 High
- projectsend ProjectSend Unauthenticated Configuration Modification 9.8 Critical
- north grid proself, north grid corporation proself enterprise/standard edition, proself gateway edition +1 more +3 more Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and... 7.5 High
- array networks ag/vxag arrayos, arraynetworks arrayos ag +1 more Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution. An... 9.8 Critical
- apple ipados, macos, safari +6 more +8 more A cookie management issue was addressed with improved state management. This issue is fixed in... 6.3 Medium
- apple ipados, macos, safari +6 more +8 more The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2... 8.8 High
- oracle corporation agile plm framework, oracle agile product lifecycle management (plm), agile product lifecycle management +2 more Vulnerability in the Oracle Agile PLM Framework product of Oracle Supply Chain (component:... 7.5 High
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 more Privilege escalation vulnerability 7.5 High
- vmware vcenter server, broadcom vmware cloud foundation, vmware vcenter server +1 more +3 more Heap-overflow vulnerability 9.8 Critical
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface 6.9 Medium
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) 9.3 Critical
- kemptechnologies loadmaster, progress kemp loadmaster +1 more LoadMaster Pre-Authenticated OS Command Injection 10.0 Critical
- palo alto networks expedition Expedition: SQL Injection Leads to Firewall Admin Credential Disclosure 9.2 Critical
- palo alto networks expedition Expedition: Unauthenticated OS Command Injection Vulnerability Leads to Firewall Credential Disclosure 9.9 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Task Scheduler Elevation of Privilege Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more NTLM Hash Disclosure Spoofing Vulnerability 6.5 Medium
- metabase GeoJSON URL validation can expose server files and environment variables to unauthorized users 10.0 Critical
- atlassian jira server, jira server and data center, jira data center +2 more Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read... 5.3 Medium
- cisco adaptive security appliance (asa), adaptive security appliance software +1 more Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security... 6.1 Medium
- android framework, google android +1 more In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path... 7.3 High
- cyberpanel upgrademysqlstatus in databases/views.py in CyberPanel (aka Cyber Panel) before 5b08cd6 allows... 10.0 Critical
- palo alto networks expedition Expedition: Missing Authentication Leads to Admin Account Takeover 9.3 Critical
- nazgul nostromo nhttpd, nostromo nhttpd +1 more Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an... 9.8 Critical
- ptzoptics pt30x-sdi, pt30x-ndi, pt30x-ndi-xx-g2 firmware +3 more +5 more PTZOptics NDI and SDI Cameras Command Injection via NTP Address Configuration 7.2 High
- ptzoptics pt30x-sdi, pt30x-ndi, pt30x-ndi-xx-g2 firmware +2 more +4 more PTZOptics NDI and SDI Cameras /cgi-bin/param.cgi Insufficient Authentication 9.1 Critical
- cisco adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd), adaptive security appliance software +2 more +4 more A vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance ... 5.8 Medium
- roundcube webmail, debian linux +1 more Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via SVG animate attributes. 6.1 Medium
- fortinet fortimanager, fortimanager cloud +1 more A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through... 9.8 Critical
- microsoft sharepoint, sharepoint enterprise server 2016, sharepoint server 2019 +2 more +4 more Microsoft SharePoint Remote Code Execution Vulnerability 7.2 High
- sciencelogic sl1 ScienceLogic SL1 unspecified vulnerability 9.3 Critical
- veeam backup & replication, backup and recovery, backup \& replication +2 more A deserialization of untrusted data vulnerability with a malicious payload can allow an... 9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 more An attacker was able to achieve code execution in the content process by exploiting a use-after... 9.8 Critical
- solarwinds web help desk, webhelpdesk +1 more SolarWinds Web Help Desk Hardcoded Credential Vulnerability 9.1 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Kernel Elevation of Privilege Vulnerability 7.0 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 more An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2... 7.2 High
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 more SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote... 6.5 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 more A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Microsoft Management Console Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows MSHTML Platform Spoofing Vulnerability 6.5 Medium
- qualcomm fastconnect 6700 firmware, fastconnect 6800 firmware, fastconnect 6900 firmware +74 more +76 more Use After Free in DSP Service 7.8 High
- Show olderLoading…