Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- twilio authy, authy 2-factor authentication, authy authenticator +2 more In the Twilio Authy API, accessed by Authy Android before 25.1.0 and Authy iOS before 26.1.0, an... 5.3 Medium
- microsoft internet explorer, ie +1 more Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers... 8.8 High
- adobe commerce, commerce and magento open source, commerce webhooks +1 more +3 more XXE can expose crypt key and other secrets granting full admin access 9.8 Critical
- solarwinds serv-u SolarWinds Serv-U L Directory Transversal Vulnerability 8.6 High
- vmware vcenter server, cloud foundation +1 more The vCenter Server contains an information disclosure vulnerability due to improper permission of... 6.5 Medium
- geoserver, geotools +1 more Remote Code Execution (RCE) vulnerability in evaluating property name expressions in Geoserver 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows MSHTML Platform Spoofing Vulnerability 7.5 High
- microsoft windows, windows 11 version 21h2, windows 11 version 22h2 +8 more +10 more Windows Hyper-V Elevation of Privilege Vulnerability 7.8 High
- rejetto http file server Rejetto HTTP File Server 2.3m Unauthenticated RCE 9.8 Critical
- cisco nx-os software, nx-os +1 more Cisco NX-OS Software CLI Command Injection Vulnerability 6.0 Medium
- linux kernel, canonical ubuntu linux, linux +3 more +5 more Moderate: kernel-rt security and bug fix update 5.3 Medium
- geosolutions-it jai-ext Improper Control of Generation of Code in jai-ext 10.0 Critical
- roundcube webmail, debian linux, fedoraproject fedora +2 more An issue was discovered in Roundcube Webmail before 1.3.12 and 1.4.x before 1.4.5. There is XSS... 6.1 Medium
- android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... 7.8 High
- progress telerik report server, telerik report server 2024 +1 more Registration Authentication Bypass Vulnerability 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Error Reporting Service Elevation of Privilege Vulnerability 7.8 High
- php, fedoraproject fedora +1 more Argument Injection in PHP-CGI 9.8 Critical
- arm bifrost gpu kernel driver, mali gpu kernel driver, valhall gpu kernel driver +2 more Mali GPU Kernel Driver allows improper GPU memory processing operations 7.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... 7.4 High
- check point quantum security gateways, checkpoint check point quantum gateway, spark gateway and cloudguard network, cloudguard network +4 more +6 more Information disclosure 8.6 High
- debian linux, linux kernel, fedoraproject fedora +15 more +17 more Use-after-free in Linux kernel's netfilter: nf_tables component 7.8 High
- javs viewer Malicious Code in Justice AV Solutions (JAVS) Viewer 8.7 High
- google chrome, fedoraproject fedora, google chromium v8 +2 more chromium - security update 9.6 Critical
- apache flink Apache Flink directory traversal attack: reading remote files through the REST API 7.5 High
- google chrome, fedoraproject fedora, google chromium v8 +2 more Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute... 9.6 Critical
- nextgen mirth connect NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote... 9.8 Critical
- google chrome, fedoraproject fedora, google chromium v8 +2 more Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to... 8.8 High
- d-link dir-605 router, dlink dir-605l, dir-605l firmware +2 more An informtion disclosure issue exists in D-LINK-DIR-605 B2 Firmware Version : 2.01MT. An attacker... 7.5 High
- d-link dir-600 router, dlink dir-600, dir-600 firmware +2 more Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx)... 8.0 High
- microsoft dwm core library, windows 10 version 1507, windows 10 version 1607 +20 more +22 more Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +22 more +24 more Windows MSHTML Platform Security Feature Bypass Vulnerability 8.8 High
- google chrome, chromium, fedoraproject fedora +2 more Use after free in Visuals in Google Chrome prior to 124.0.6367.201 allowed a remote attacker who... 9.6 Critical
- gitlab, gitlab ce/ee +1 more Weak Password Recovery Mechanism for Forgotten Password in GitLab 10.0 Critical
- microsoft smartscreen prompt, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more SmartScreen Prompt Security Feature Bypass Vulnerability 8.8 High
- cisco asa, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +3 more +5 more A vulnerability in a legacy capability that allowed for the preloading of VPN clients and plug... 6.0 Medium
- cisco asa, adaptive security appliance (asa) software, adaptive security appliance (asa) and firepower threat defense (ftd) +3 more +5 more A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance (ASA)... 8.6 High
- crushftp Unauthenticated arbitrary file read and remote code execution in CrushFTP 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- palo alto networks cloud ngfw, pan-os, prisma access +2 more PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect 10.0 Critical
- d-link dns-320l, dns-325, dns-327l +22 more +24 more D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi command injection 7.3 High
- d-link dns-320l, dns-325, dns-327l +22 more +24 more D-Link DNS-320L/DNS-325/DNS-327L/DNS-340L HTTP GET Request nas_sharing.cgi hard-coded credentials 9.8 Critical
- android pixel, google android +1 more there is a possible way to bypass due to a logic error in the code. This could lead to local... 7.8 High
- android pixel, google android +1 more there is a possible Information Disclosure due to uninitialized data. This could lead to local... 5.5 Medium
- microsoft sharepoint server, sharepoint enterprise server 2016, sharepoint server 2019 +2 more +4 more Microsoft SharePoint Server Remote Code Execution Vulnerability 7.2 High
- fortinet forticlientems, forticlient ems, forticlient enterprise management server +2 more A improper neutralization of special elements used in an sql command ('sql injection') in... 9.3 Critical
- ivanti endpoint manager cloud service appliance (epm csa), endpoint manager cloud services appliance +1 more A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an... 9.8 Critical
- nice linear emerge e3-series, nortekcontrol linear emerge elite firmware, linear emerge essential firmware +2 more Linear eMerge E3-Series devices allow Command Injections. 9.8 Critical
- jetbrains teamcity In JetBrains TeamCity before 2023.11.4 authentication bypass allowing to perform admin actions... 9.8 Critical
- apple ipados, macos, tvos +6 more +8 more A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4... 7.8 High
- apple ipados, macos, tvos +6 more +8 more A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 16.7... 7.8 High
- Show olderLoading…