Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- zoho manageengine, zohocorp manageengine adselfservice plus +1 more Zoho ManageEngine ADSelfService Plus before 6122 allows an authenticated user to achieve remote... 6.8 Medium
- zk framework auuploader, zkoss zk framework +1 more ZK Framework vulnerable to malicious POST 7.5 High
- ibm aspera faspex IBM Aspera Faspex code execution 9.8 Critical
- mitel mivoice connect The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an... 6.8 Medium
- mitel mivoice connect A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 (22.22.6100.0... 6.8 Medium
- cacti Unauthenticated Command Injection 9.8 Critical
- apple ipados, macos, safari +3 more +5 more A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura... 8.8 High
- microsoft windows, office for android, office for ios +32 more +34 more Windows Graphics Component Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +29 more +31 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- microsoft 365 apps, 365 apps for enterprise, office +2 more Microsoft Publisher Security Feature Bypass Vulnerability 7.3 High
- terra-master terramaster operating system, terramaster os +1 more TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative... 7.5 High
- fortra goanywhere mft, goanywhere managed file transfer +1 more Fortra GoAnywhere MFT License Response Servlet Command Injection 7.2 High
- intel ethernet diagnostics driver for windows, ethernet diagnostics driver iqvw32.sys, ethernet diagnostics driver iqvw64.sys +2 more (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics... 7.8 High
- sugarcrm, sugarcrm multiple products +1 more In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the... 8.8 High
- oracle e-business suite, oracle corporation web applications desktop integrator +1 more Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business... 9.8 Critical
- progress telerik ui for asp.net ajax, telerik user interface (ui) for asp.net ajax +1 more Progress Telerik UI for ASP.NET AJAX before R2 2017 SP2 does not properly restrict user input to... 9.8 Critical
- zoho manageengine, zohocorp manageengine access manager plus, manageengine ad360 +20 more +22 more Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow... 9.8 Critical
- cwp control web panel, control-webpanel webpanel +1 more RESERVED An issue in the /login/index.php component of Centos Web Panel 7 before v0.9.8.1147... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability 8.8 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 22 +3 more +5 more Microsoft Exchange Server Elevation of Privilege Vulnerability 8.8 High
- tibco jasperreports, jasperreports library, jasperreports server +8 more +10 more TIBCO JasperReports Library Directory Traversal Vulnerability 9.9 Critical
- tibco jasperreports, jasperreports server, jaspersoft +5 more +7 more TIBCO JasperReports Server Information Disclosure Vulnerability 7.7 High
- apple ios, ipados, macos +3 more +5 more A type confusion issue was addressed with improved state handling. This issue is fixed in Safari... 8.8 High
- fortinet fortios, fortiproxy +1 more A heap-based buffer overflow vulnerability [CWE-122] in FortiOS SSL-VPN 7.2.0 through 7.2.2, 7.0... 9.3 Critical
- microsoft defender, windows 10 version 1607, windows 10 version 1809 +15 more +17 more Windows SmartScreen Security Feature Bypass Vulnerability 5.4 Medium
- citrix application delivery controller (adc) and gateway, application delivery controller firmware, gateway, citrix adc +1 more +3 more Unauthenticated remote arbitrary code execution 9.8 Critical
- veeam backup & replication, backup \& replication +1 more Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x... 8.8 High
- veeam backup & replication, backup \& replication +1 more Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). 9.8 Critical
- google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to... 8.8 High
- google chrome, chromium gpu, microsoft edge +1 more +3 more Heap buffer overflow in GPU 9.6 Critical
- oracle access manager, fusion middleware +1 more Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows Scripting Languages Remote Code Execution Vulnerability 8.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +26 more +28 more Windows CNG Key Isolation Service Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +21 more +23 more Windows Mark of the Web Security Feature Bypass Vulnerability 5.4 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +34 more +36 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- samsung android, mobile devices, samsung mobile devices +2 more An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release... 6.1 Medium
- samsung android, mobile devices, samsung mobile devices +2 more An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes... 6.2 Medium
- samsung mobile devices, samsung mobile devices, samsung android +2 more Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021... 4.4 Medium
- google chrome, chromium v8 +1 more Type confusion in V8 in Google Chrome prior to 107.0.5304.87 allowed a remote attacker to... 8.8 High
- apple ipados, ios and ipados, iphone os +2 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 7.8 High
- cisco anyconnect secure, anyconnect secure mobility client +1 more Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability 7.8 High
- cisco anyconnect secure, anyconnect secure mobility client +1 more Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability 6.5 Medium
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE... 9.8 Critical
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS... 7.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS... 7.8 High
- gigabyte aorus graphics engine, app center, oc guru ii +2 more +4 more The GDrv low-level driver in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE... 7.8 High
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload... 9.8 Critical
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more The overlayfs implementation in the linux kernel did not properly validate with respect to user... 8.8 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 more An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version... 9.8 Critical
- Show olderLoading…