Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more The postjournal service in Zimbra Collaboration (ZCS) before 8.8.15 Patch 46, 9 before 9.0.0... 10.0 Critical
- ivanti epm, endpoint manager (epm), endpoint manager +2 more An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows... 9.6 Critical
- d-link dir-820 router, dlink dir-820l firmware, dir820la1 firmware +2 more OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate... 9.8 Critical
- draytek multiple vigor routers, vigor2960 firmware, vigor300b firmware +1 more +3 more On DrayTek Vigor3900, Vigor2960, and Vigor300B devices before 1.5.1, cgi-bin/mainfunction.cgi... 9.8 Critical
- sap commerce cloud, sap se commerce cloud (virtualjdbc extension) +1 more Due to unsafe deserialization used in SAP Commerce Cloud (virtualjdbc extension), versions 6.4, 6... 9.8 Critical
- ivanti vtm, virtual traffic manager +1 more Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1... 9.8 Critical
- ivanti cloud services appliance (csa), csa (cloud services appliance), endpoint manager cloud services appliance +2 more Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to... 9.4 Critical
- apache hugegraph, hugegraph-server +1 more Apache HugeGraph-Server: Command execution in gremlin 9.8 Critical
- oracle adf faces, application development framework, jdeveloper +1 more +3 more Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)... 9.8 Critical
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 9.8 Critical
- microsoft sql server, sql server 2014 service pack 3 for 32-bit systems (cu), sql server 2014 service pack 3 for 32-bit systems (gdr) +3 more +5 more A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it... 8.8 High
- adobe air, air sdk, flash player +7 more +9 more Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x... 8.8 High
- adobe flash player, google chrome, opensuse +6 more +8 more Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0... 9.8 Critical
- adobe flash player, opensuse, redhat enterprise linux desktop +5 more +7 more Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash... 8.8 High
- adobe flash player, opensuse, redhat enterprise linux desktop +5 more +7 more The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on... 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows MSHTML Platform Spoofing Vulnerability 8.8 High
- progress whatsup gold, whatsupgold +1 more WhatsUp Gold HasErrors SQL Injection Authentication Bypass Vulnerability 9.8 Critical
- ivanti cloud services appliance, csa (cloud services appliance), endpoint manager cloud services appliance +2 more An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518... 7.2 High
- microsoft publisher, office 2019, office ltsc 2021 +2 more +4 more Microsoft Publisher Security Feature Bypass Vulnerability 7.3 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Installer Elevation of Privilege Vulnerability 7.8 High
- sonicwall sonicos An improper access control vulnerability has been identified in the SonicWall SonicOS management... 9.8 Critical
- linux kernel, centos, redhat enterprise linux +2 more Linux distributions that have not patched their long-term kernels with https://git.kernel.org... 7.8 High
- imagemagick, canonical ubuntu linux, debian linux +3 more +5 more The (1) EPHEMERAL, (2) HTTPS, (3) MVG, (4) MSL, (5) TEXT, (6) SHOW, (7) WIN, and (8) PLT coders... 8.4 High
- kingsoft wps office, wps office +1 more Arbitrary Code Execution in WPS Office 9.3 Critical
- draytek vigorconnect A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download... 7.5 High
- draytek vigorconnect A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download... 7.5 High
- google chrome, chromium v8, microsoft edge chromium +2 more Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote... 8.8 High
- apache ofbiz Apache OFBiz: Unauthenticated endpoint could allow execution of screen rendering code 9.8 Critical
- google chrome, chromium v8, microsoft edge +2 more Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit... 9.6 Critical
- versa director, versa-networks versa director +1 more The Versa Director GUI provides an option to customize the look and feel of the user interface.... 6.6 Medium
- linux kernel, netapp h300e firmware, h300s firmware +6 more +8 more Important: kernel security and bug fix update 8.4 High
- dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +16 more +18 more The identity authentication bypass vulnerability found in some Dahua products during the login... 9.8 Critical
- dahua ip camera firmware, dahuasecurity ipc-hum7xxx firmware, ipc-hx3xxx firmware +17 more +19 more The identity authentication bypass vulnerability found in some Dahua products during the login... 9.8 Critical
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 20 +3 more +5 more Microsoft Exchange Server Remote Code Execution Vulnerability 7.2 High
- jenkins, jenkins command line interface (cli) +1 more Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE 9.8 Critical
- solarwinds web help desk, webhelpdesk +1 more SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability 9.8 Critical
- microsoft project, 365 apps, 365 apps for enterprise +4 more +6 more Microsoft Project Remote Code Execution Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +28 more +30 more Windows Power Dependency Coordinator Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Kernel Elevation of Privilege Vulnerability 7.0 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Mark of the Web Security Feature Bypass Vulnerability 6.5 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Scripting Engine Memory Corruption Vulnerability 7.5 High
- android kernel, debian linux +1 more net: fix __dst_negative_advice() race 7.8 High
- apache ofbiz Apache OFBiz: Path traversal leading to RCE 9.8 Critical
- microsoft windows, windows 10, windows 7 +12 more +14 more A remote code execution vulnerability exists in "Microsoft COM for Windows" when it fails to... 8.8 High
- vmware esxi, cloud foundation +1 more VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient... 6.8 Medium
- acronis cyber infrastructure, cyber infrastructure (aci) +1 more Remote command execution due to use of default passwords. The following products are affected:... 9.8 Critical
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 more Incomplete Input Validation in GlideExpression Script 9.2 Critical
- servicenow now platform, servicenow, servicenow utah, vancouver, and washington dc now platform +2 more Jelly Template Injection Vulnerability in ServiceNow UI Macros 9.3 Critical
- Show olderLoading…