Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- ignite realtime openfire Openfire administration console authentication bypass 8.6 High
- ivanti mobileiron sentry, sentry +1 more A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and... 9.8 Critical
- veeam backup & replication, backup \& replication +1 more Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the... 7.5 High
- adobe coldfusion Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution 9.8 Critical
- citrix sharefile storage zones controller, content collaboration +1 more A vulnerability has been discovered in the customer-managed ShareFile storage zones controller... 9.8 Critical
- microsoft .net, fedoraproject fedora, microsoft .net 6.0 +8 more +10 more .NET and Visual Studio Denial of Service Vulnerability 7.5 High
- billion 5200w-t firmware, zyxel p660hn-t1a routers, p660hn-t1a v1 firmware +1 more +3 more The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by... 9.8 Critical
- ivanti epmm, endpoint manager mobile (epmm), endpoint manager mobile +2 more A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2... 7.2 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. 6.1 Medium
- apple ipados, macos, tvos +4 more +6 more This issue was addressed with improved state management. This issue is fixed in iOS 16.6 and... 5.5 Medium
- ivanti endpoint manager mobile, endpoint manager mobile (epmm) +1 more Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote... 10.0 Critical
- adobe coldfusion ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298 7.5 High
- adobe coldfusion Adobe ColdFusion Improper Access Control Security feature bypass 7.5 High
- citrix netscaler adc, netscaler adc and netscaler gateway, netscaler gateway +1 more +3 more Unauthenticated remote code execution 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows Search Remote Code Execution Vulnerability 7.5 High
- apple ipados, macos, safari +6 more +8 more The issue was addressed with improved checks. This issue is fixed in watchOS 9.6, iOS 16.6 and... 8.8 High
- solarview compact, contec sv-cpt-mc310 firmware +1 more SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via... 9.8 Critical
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Outlook Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows Error Reporting Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +15 more +17 more Windows SmartScreen Security Feature Bypass Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +27 more +29 more Windows MSHTML Platform Elevation of Privilege Vulnerability 7.8 High
- netwrix auditor Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording... 9.8 Critical
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more . The Arm Mali GPU kernel driver allows an unprivileged user to achieve access to freed memory,... 8.8 High
- samsung android, mobile devices, samsung mobile devices +2 more Assuming radio permission is gained, missing input validation in modem interface driver prior to... 3.3 Low
- samsung android, mobile devices, samsung mobile devices +2 more Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR... 7.3 High
- samsung android, mobile devices, samsung mobile devices +2 more A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to... 6.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 more A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021... 6.4 Medium
- samsung android, mobile devices, samsung mobile devices +2 more An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds... 6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 more A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF... 6.1 Medium
- d-link dwl-2600ap access point, dlink dwl-2600ap firmware +1 more D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability... 7.8 High
- d-link dir-859 router, dlink dir-818lx firmware, dir-822 firmware +12 more +14 more The UPnP endpoint URL /gena.cgi in the D-Link DIR-859 Wi-Fi router 1.05 and 1.06B01 Beta01 allows... 9.8 Critical
- apple ipados, macos, safari +4 more +6 more A type confusion issue was addressed with improved checks. This issue is fixed in iOS 16.5.1 and... 8.8 High
- apple ipados, macos, watchos +3 more +5 more An integer overflow was addressed with improved input validation. This issue is fixed in watchOS... 7.8 High
- zyxel nas326 firmware, nas540 firmware, multiple network-attached storage (nas) devices +1 more +3 more The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions... 9.8 Critical
- vmware tools, debian linux, fedoraproject fedora +2 more VMware Tools Authentication Bypass Vulnerability 3.9 Low
- apple ipados, macos, safari +3 more +5 more A memory corruption issue was addressed with improved state management. This issue is fixed in... 8.8 High
- vmware aria operations for networks Aria Operations for Networks contains a command injection vulnerability. A malicious actor with... 9.8 Critical
- debian linux, fedoraproject fedora, roundcube webmail +2 more Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search... 9.8 Critical
- roundcube webmail, debian linux, fedoraproject fedora +2 more linkref_addindex in rcube_string_replacer.php in Roundcube Webmail before 1.4.10 allows XSS via a... 6.1 Medium
- roundcube webmail, opensuse backports sle, leap +2 more rcube_image.php in Roundcube Webmail before 1.4.4 allows attackers to execute arbitrary code via... 9.8 Critical
- mozilla firefox, firefox esr, thunderbird +9 more +11 more A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this... 7.5 High
- microsoft win32k, windows 7, windows 8.1 +6 more +8 more The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 7.8 High
- fortinet fortios, fortiproxy, fortios and fortiproxy ssl-vpn +1 more +3 more A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version... 9.2 Critical
- google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to... 8.8 High
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 more A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware... 9.8 Critical
- zyxel atp series firmware, usg flex 50(w) firmware, usg flex series firmware +27 more +29 more A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware... 9.8 Critical
- progress moveit transfer, moveit cloud +1 more In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022... 9.8 Critical
- zyxel atp series firmware, usg flex series firmware, vpn series firmware +21 more +23 more Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73,... 9.8 Critical
- barracuda email security gateway, email security gateway 300 firmware, email security gateway 400 firmware +4 more +6 more Remote Code injection in Barracuda Email Security Gateway 9.4 Critical
- apple ipados, macos, safari +5 more +7 more The issue was addressed with improved bounds checks. This issue is fixed in watchOS 9.5, macOS... 8.6 High
- Show olderLoading…