Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 more Windows SmartScreen Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 21h2 +16 more +18 more Windows DWM Core Library Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +31 more +33 more Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
- sysaid, sysaid server, on-premises +2 more In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after... 9.8 Critical
- juniper junos, junos os +1 more Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files 5.3 Medium
- juniper junos, junos os +1 more Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files 5.3 Medium
- juniper junos, junos os +1 more Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable 9.8 Critical
- juniper junos, junos os +1 more Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables 5.3 Medium
- juniper junos, junos os +1 more Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files 5.3 Medium
- service location protocol project location protocol, ietf service location protocol (slp), netapp smi-s provider +3 more +5 more The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to... 7.5 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.... 10.0 Critical
- apache activemq, activemq legacy openwire module, debian linux +3 more +5 more Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack 10.0 Critical
- f5 big-ip, big-ip configuration utility, big-ip access policy manager +19 more +21 more BIG-IP Configuration utility authenticated SQL injection vulnerability 8.8 High
- f5 big-ip, big-ip configuration utility, big-ip access policy manager +19 more +21 more BIG-IP Configuration utility unauthenticated remote code execution vulnerability 9.8 Critical
- debian linux, fedoraproject fedora, roundcube roundcubemail +1 more +3 more Stored XSS vulnerability in Roundcube 6.1 Medium
- cisco ios xe software, ios xe, ios xe web ui +2 more A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated,... 7.2 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Unauthenticated sensitive information disclosure 9.4 Critical
- cisco ios xe software, ios xe, ios xe web ui +2 more +4 more Cisco is aware of active exploitation of a previously unknown vulnerability in the web UI feature... 10.0 Critical
- microsoft wordpad, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Microsoft WordPad Information Disclosure Vulnerability 6.5 Medium
- microsoft skype for business, skype for business server 2015 cu13, skype for business server 2019 cu7 +1 more +3 more Skype for Business Elevation of Privilege Vulnerability 5.3 Medium
- cisco ios xe software, ios, ios xe +1 more +3 more A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS... 6.6 Medium
- eclipse jetty, ietf http, http/2 +166 more +168 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High
- adobe acrobat, acrobat reader, acrobat reader dc +2 more +4 more Adobe Acrobat Reader DC resetForm Use-After-Free Remote Code Execution Vulnerability 7.8 High
- apple ipados, ios and ipados, iphone os +2 more The issue was addressed with improved checks. This issue is fixed in iOS 17.0.3 and iPadOS 17.0.3... 7.8 High
- atlassian confluence data center, confluence data center and server, confluence server +2 more Atlassian has been made aware of an issue reported by a handful of customers where external... 10.0 Critical
- progress ws ftp server WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability 10.0 Critical
- jetbrains teamcity In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server... 9.8 Critical
- microsoft windows cng key isolation service, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows CNG Key Isolation Service Elevation of Privilege Vulnerability 7.0 High
- arm mali gpu kernel driver, 5th gen gpu architecture kernel driver, bifrost gpu kernel driver +3 more +5 more Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations 5.5 Medium
- google chrome, libvpx, apple ipados +9 more +11 more Electron affected by libvpx's heap buffer overflow in vp8 encoding 8.8 High
- [unknown] richfaces, red hat jboss richfaces framework, redhat enterprise linux +2 more Richfaces vulnerable to arbitrary code execution 9.8 Critical
- apple macos, ipad os, ipados +13 more +15 more The issue was addressed with improved checks. This issue is fixed in Safari 16.6.1, macOS Ventura... 8.8 High
- apple ipados, macos, ios and ipados +2 more +4 more The issue was addressed with improved checks. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS... 7.8 High
- apple ipados, macos, ios and ipados +2 more +4 more A certificate validation issue was addressed. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS... 5.5 Medium
- trend micro apex one, trend micro, inc. micro apex one, trendmicro worry-free business security +4 more +6 more A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem... 7.2 High
- minio MinIO is vulnerable to privilege escalation on Linux/MacOS 8.8 High
- google android, samsung mobile devices, samsung mobile devices +2 more An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022... 5.0 Medium
- facade ignition Unauthenticated remote code execution in Ignition 9.8 Critical
- zyxel emg2926 routers, emg2926 firmware +1 more A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware... 8.8 High
- realtek sdk, aterm w1200ex-ms firmware, w1200ex firmware +23 more +25 more The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a... 9.8 Critical
- adobe acrobat, acrobat reader, acrobat dc +2 more +4 more [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild 7.8 High
- google chrome, libwebp, bandisoft honeyview +10 more +12 more Duplicate Advisory: Bundled libwebp in Pillow vulnerable 8.8 High
- cisco adaptive security appliance (asa) software, adaptive security appliance and firepower threat defense, adaptive security appliance software +2 more +4 more A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA)... 5.0 Medium
- android framework, google android +1 more In onCreate of WindowState.java, there is a possible way to launch a background activity due to a... 7.8 High
- microsoft word, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Word Information Disclosure Vulnerability 6.5 Medium
- microsoft streaming service proxy, windows 10 version 1809, windows 10 version 21h2 +11 more +13 more Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability 7.8 High
- apple ipados, macos, ios and ipados +2 more +4 more A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS... 7.8 High
- apple ipados, watchos, ios and ipados +2 more +4 more A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS... 7.8 High
- apache rocketmq Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function 9.8 Critical
- rarlab winrar RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to... 7.8 High
- Show olderLoading…