Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- google android, android pixel +1 more In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide... 5.5 Medium
- sunhillo sureline Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell... 9.8 Critical
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more Windows Kernel Elevation of Privilege Vulnerability 7.8 High
- microsoft streaming service, windows 10 version 1607, windows 10 version 1809 +15 more +17 more Microsoft Streaming Service Elevation of Privilege Vulnerability 8.4 High
- connectwise screenconnect Authentication bypass using an alternate path or channel 10.0 Critical
- microsoft exchange server, exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 13 +1 more +3 more Microsoft Exchange Server Elevation of Privilege Vulnerability 9.8 Critical
- cisco adaptive security appliance software, adaptive security appliance (asa) software, firepower threat defense +2 more +4 more Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Information Disclosure Vulnerability 7.5 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more Internet Shortcut Files Security Feature Bypass Vulnerability 8.1 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +19 more +21 more Windows SmartScreen Security Feature Bypass Vulnerability 7.6 High
- debian linux, roundcube webmail +1 more Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e... 6.1 Medium
- fortinet fortios, fortiproxy +1 more A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0... 9.6 Critical
- google chrome, debian linux, fedoraproject fedora +2 more +4 more Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to... 8.8 High
- ivanti connect secure, policy secure, connect secure, policy secure, and neurons +3 more +5 more A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x,... 8.2 High
- apple ipados, macos, tvos +4 more +6 more The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.1, watchOS... 7.0 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more Summary of Vulnerability A template injection vulnerability on older versions of Confluence Data... 10.0 Critical
- apple ipados, macos, safari +5 more +7 more A type confusion issue was addressed with improved checks. This issue is fixed in tvOS 17.3, iOS... 8.8 High
- vmware vcenter server, cloud foundation, cloud foundation (vmware vcenter server) +2 more VMware vCenter Server Out-of-Bounds Write Vulnerability 9.8 Critical
- ivanti epmm, endpoint manager mobile (epmm) and mobileiron core, endpoint manager mobile +2 more An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users... 10.0 Critical
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Denial of Service 8.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more [PROBLEMTYPE] in [COMPONENT] in [VENDOR] [PRODUCT] [VERSION] on [PLATFORMS] allows [ATTACKER] to ... 5.5 Medium
- google chrome, couchbase server, fedoraproject fedora +1 more +3 more Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote... 8.8 High
- laravel, laravel framework +1 more Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 8.1 High
- ivanti connect secure, policy secure, connect secure and policy secure +2 more +4 more A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and... 9.1 Critical
- ivanti ics, policy secure, connect secure and policy secure +2 more +4 more An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti... 8.2 High
- microsoft sharepoint server, sharepoint server 2019 +1 more Microsoft SharePoint Server Elevation of Privilege Vulnerability 9.8 Critical
- apple ipados, macos, tvos +4 more +6 more The issue was addressed with improved handling of caches. This issue is fixed in macOS Ventura 13... 7.8 High
- adobe coldfusion Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE 9.8 Critical
- adobe coldfusion Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution 9.8 Critical
- apache superset Apache Superset: Session validation vulnerability when using provided default SECRET_KEY 8.9 High
- joomla!, joomla joomla\!, joomla! project cms +2 more [20230201] - Core - Improper access check in webservice endpoints 5.3 Medium
- d-link dsl-2750b devices, dlink dsl-2750b firmware +1 more D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login... 9.8 Critical
- douglas wilson spreadsheet::parseexcel, debian linux, fedoraproject fedora +1 more +3 more Arbitrary Code Execution (ACE) Vulnerability 7.8 High
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker... 8.8 High
- qnap qvr firmware, viostor nvr +1 more Legacy VioStor NVR 8.0 High
- fxc ae1021 firmware, ae1021pe firmware, fxc inc. ae1021 +2 more +4 more An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and... 8.8 High
- unitronics visilogic, samba 3.5 firmware, samba 4.3 firmware +15 more +17 more Unitronics VisiLogic uses a default administrative password 9.8 Critical
- qlik sense A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023... 8.2 High
- qlik sense An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions... 9.6 Critical
- qualcomm 315 5g iot modem firmware, apq8017 firmware, apq8064au firmware +241 more +243 more Integer Overflow or Wraparound in Graphics Linux 8.4 High
- qualcomm ar8035 firmware, csra6620 firmware, csra6640 firmware +152 more +154 more Use of Out-of-range Pointer Offset in Graphics 8.4 High
- qualcomm 315 5g iot modem firmware, 8098 firmware, 8953pro firmware +313 more +315 more Use After Free in DSP Services 7.8 High
- qualcomm, inc. snapdragon auto, snapdragon compute, snapdragon connectivity, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice & music, qualcomm apq8053 firmware, ar8031 firmware +89 more +91 more Possible use after free when process shell memory is freed using IOCTL munmap call and process... 8.4 High
- apple ipados, macos, safari +6 more +8 more A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS... 8.8 High
- apple ipados, macos, safari +6 more +8 more An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17... 6.5 Medium
- google chrome, debian linux, fedoraproject fedora +2 more +4 more Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who... 9.6 Critical
- owncloud graphapi, graph api +1 more An issue was discovered in ownCloud owncloud/graphapi 0.2.x before 0.2.1 and 0.3.x before 0.3.1.... 10.0 Critical
- gnu glibc, c library, canonical ubuntu linux +48 more +50 more Glibc: buffer overflow in ld.so leading to privilege escalation 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- sophos web appliance A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance... 9.8 Critical
- oracle fusion middleware, weblogic server +1 more Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS... 9.8 Critical
- Show olderLoading…