Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- apple ipados, macos, safari +7 more +9 more A use-after-free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- apple ipados, macos, safari +6 more +8 more An out-of-bounds read was addressed with improved input validation. This issue is fixed in... 6.5 Medium
- samsung android, mobile devices, samsung mobile devices +2 more Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged... 4.4 Medium
- cisco ios, ios xe, ios xr +1 more +3 more The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE... 7.5 High
- cisco ios Cisco IOS 12.2(15) and earlier allows remote attackers to cause a denial of service (refused VTY ... 5.9 Medium
- ruckuswireless ruckus wireless admin, commscope ruckus smartzone firmware, ruckus wireless multiple products +1 more +3 more Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET... 9.8 Critical
- polkit project polkit, canonical ubuntu linux, debian linux +3 more +5 more It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests... 7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +16 more +18 more Apache Tomcat Improper Access Control vulnerability 9.8 Critical
- oracle jrockit, apache cassandra, canonical ubuntu linux +35 more +37 more Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and... 9.8 Critical
- jenkins, jenkins user interface (ui), redhat openshift +2 more Jenkins discloses project names via fingerprints 5.0 Medium
- debian linux, linux kernel, canonical ubuntu linux +26 more +28 more The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not... 6.9 Medium
- linux kernel, canonical ubuntu linux, opensuse +5 more +7 more The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol... 7.8 High
- microsoft win32k, windows 10 version 1507, windows 10 version 1607 +14 more +16 more Win32k Elevation of Privilege Vulnerability 7.8 High
- tp-link archer ax21, archer ax21 firmware +1 more TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command... 8.8 High
- oracle weblogic server Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)... 7.5 High
- apache log4j, log4j2, cvat computer vision annotation tool +53 more +55 more Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack 9.0 Critical
- papercut ng, mf/ng, mf +2 more This vulnerability allows remote attackers to bypass authentication on affected installations of... 9.8 Critical
- google chrome, debian linux, fedoraproject fedora +1 more +3 more Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who... 9.6 Critical
- minio Minio Information Disclosure in Cluster Deployment 7.5 High
- cisco ios, ios xe software, ios and ios xe software +2 more +4 more The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0... 8.8 High
- google chrome, couchbase server, debian linux +2 more +4 more Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to... 8.8 High
- apple macos, mac os x +1 more A use after free issue was addressed with improved memory management. This issue is fixed in... 7.8 High
- 3rdmill novi survey, novi survey survey +1 more Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in... 9.8 Critical
- google android, android framework +1 more In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of... 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- apple ios, ipados, and macos, ipados, macos +2 more +4 more Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability 8.6 High
- apple ipados, macos, safari +3 more +5 more A use after free issue was addressed with improved memory management. This issue is fixed in iOS... 8.8 High
- arm bifrost gpu kernel driver, midgard gpu kernel driver, valhall gpu kernel driver +2 more +4 more Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions... 3.3 Low
- veritas backup exec, backup exec agent +1 more An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication... 8.2 High
- veritas backup exec, backup exec agent +1 more An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client... 8.8 High
- veritas backup exec, backup exec agent +1 more An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client... 8.1 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +17 more +19 more An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not... 7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component... 6.1 Medium
- fortra cobalt strike Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing... 9.8 Critical
- debian linux, linux kernel +1 more Use after free in SNDRV_CTL_IOCTL_ELEM in Linux Kernel 7.9 High
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more An Arm product family through 2022-08-12 mail GPU kernel driver allows non-privileged users to... 8.8 High
- fortra cobalt strike An XSS (Cross Site Scripting) vulnerability was found in HelpSystems Cobalt Strike through 4.7... 6.1 Medium
- google chrome, fedoraproject fedora, google chromium network service +2 more Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote... 8.8 High
- arm bifrost gpu kernel driver, mali graphics processing unit (gpu), midgard gpu kernel driver +1 more +3 more An Arm product family through 2022-01-03 has an Exposed Dangerous Method or Function. 7.8 High
- apple ios, ipados, and macos, ipados, macos +2 more +4 more Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability 7.8 High
- samba, debian linux +1 more Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code... 9.8 Critical
- microsoft internet explorer Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or... 8.8 High
- adobe coldfusion Adobe ColdFusion Improper Access Control Arbitrary code execution 8.6 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +17 more +19 more Windows SmartScreen Security Feature Bypass Vulnerability 4.4 Medium
- microsoft outlook, 365 apps, 365 apps for enterprise +6 more +8 more Microsoft Outlook Elevation of Privilege Vulnerability 9.8 Critical
- fortinet fortios A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') ... 6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 more XStream is vulnerable to a Remote Command Execution attack 8.5 High
- plex media server Deserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated... 7.2 High
- glpi-project glpi Teclib GLPI Remote Code Execution Vulnerability 9.8 Critical
- apache spark Apache Spark shell command injection vulnerability via Spark UI 8.8 High
- Show olderLoading…