Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows LSA Spoofing Vulnerability 8.1 High
- mitel mivoice connect The Service Appliance component in Mitel MiVoice Connect through 19.2 SP3 allows remote code... 9.8 Critical
- polkit project polkit, canonical ubuntu linux, oracle http server +27 more +29 more A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec... 7.8 High
- apple ios and ipados, ipados, iphone os +2 more Apple iOS and iPadOS Buffer Overflow Vulnerability 7.8 High
- google chrome, fedoraproject fedora, google chromium popupblocker +2 more Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91.0.4472.77 allowed a... 6.5 Medium
- apple ios, ipados, tvos +2 more +4 more A memory corruption issue was addressed by removing the vulnerable code. This issue is fixed in... 7.8 High
- apple ios, ipados, macos +5 more +7 more A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS... 7.8 High
- apple ios, macos, tvos +4 more +6 more A use after free issue was addressed with improved memory management. This issue is fixed in iOS... 7.8 High
- apple tvos, watchos, iphone os +2 more +4 more A memory corruption issue was addressed with improved memory handling. This issue affected... 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +30 more +32 more Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability 7.8 High
- sap netweaver, sap se netweaver (visual composer 7.0 rt) +1 more SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an... 9.9 Critical
- sap netweaver, netweaver application server java +1 more The Universal Worklist Configuration in SAP NetWeaver AS JAVA 7.4 allows remote attackers to... 5.3 Medium
- sap netweaver, netweaver application server java +1 more SQL injection vulnerability in the UDDI server in SAP NetWeaver J2EE Engine 7.40 allows remote... 9.8 Critical
- qnap photo station This external control of file name or path vulnerability allows remote attackers to access or... 9.8 Critical
- qnap photo station This external control of file name or path vulnerability allows remote attackers to access or... 9.8 Critical
- qnap qts This improper input validation vulnerability allows remote attackers to inject arbitrary code to... 9.8 Critical
- qnap photo station This improper access control vulnerability allows remote attackers to gain unauthorized access to... 9.8 Critical
- cisco rv series routers, small business rv series router firmware, rv016 multi-wan vpn firmware +3 more +5 more Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability 8.8 High
- google chrome, chromium v8 +1 more Out of bounds write in JavaScript in Google Chrome prior to 73.0.3683.86 allowed a remote... 6.5 Medium
- google chrome, debian linux, google chromium v8 +3 more +5 more Execution of user supplied Javascript during array deserialization leading to an out of bounds... 8.8 High
- google chrome, debian linux, google chromium v8 +3 more +5 more Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote... 8.8 High
- adobe acrobat and reader, acrobat dc, acrobat reader dc +2 more Adobe Acrobat and Reader versions 2018.011.20038 and earlier, 2017.011.30079 and earlier, and... 8.8 High
- google chrome, debian linux, google chromium v8 +4 more +6 more Integer overflow in computing the required allocation size when instantiating a new javascript... 8.8 High
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 more Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0... 8.8 High
- netgear multiple devices, wnr2000 firmware +1 more NETGEAR WNR2000v3 devices before 1.1.2.14, WNR2000v4 devices before 1.0.0.66, and WNR2000v5... 9.8 Critical
- debian linux, google chrome, chromium v8 +3 more +5 more Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux,... 8.8 High
- google chrome, chromium v8, redhat enterprise linux desktop +2 more +4 more V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840... 8.8 High
- google chrome, canonical ubuntu linux, debian linux +8 more +10 more The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome... 8.8 High
- microsoft office Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to... 7.8 High
- adobe flash player Integer overflow in the copyRawDataTo method in the Matrix3D class in Adobe Flash Player before... 8.8 High
- microsoft internet explorer Use-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet... 8.1 High
- microsoft xml core services Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which... 8.8 High
- microsoft windows, windows 7, windows server 2003 +3 more +5 more The Authenticode Signature Verification function in Microsoft Windows XP SP2 and SP3, Windows... 7.8 High
- adobe flash player Cross-site scripting (XSS) vulnerability in Adobe Flash Player before 10.3.183.15 and 11.x before... 6.1 Medium
- adobe flash player Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux,... 8.1 High
- adobe acrobat, reader and acrobat, acrobat reader +2 more Unspecified vulnerability in the U3D component in Adobe Reader and Acrobat 10.1.1 and earlier on... 9.8 Critical
- adobe acrobat, air, flash player +4 more +6 more Unspecified vulnerability in Adobe Flash Player 10.2.154.13 and earlier on Windows, Mac OS X,... 7.8 High
- microsoft powerpoint Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute... 7.8 High
- adobe acrobat, acrobat and reader, acrobat reader +2 more Stack-based buffer overflow in CoolType.dll in Adobe Reader and Acrobat 9.x before 9.4, and 8.x... 7.3 High
- adobe acrobat, air, flash player +2 more +4 more Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64; Adobe AIR before 2.0.2.12610; and... 7.8 High
- adobe acrobat, acrobat and reader, opensuse +2 more +4 more The U3D implementation in Adobe Reader and Acrobat 9.x before 9.3, 8.x before 8.2 on Windows and... 8.8 High
- adobe acrobat, acrobat and reader, acrobat reader +3 more +5 more Use-after-free vulnerability in the Doc.media.newPlayer method in Multimedia.api in Adobe Reader... 7.8 High
- adobe acrobat, flash player, acrobat and reader, flash player +1 more +3 more Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9... 7.8 High
- microsoft office, office compatibility pack, office excel viewer +2 more +4 more Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for... 7.8 High
- microsoft office, office compatibility pack, office word viewer +1 more +3 more Stack-based buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP1 and SP2;... 7.8 High
- adobe acrobat, acrobat and reader, acrobat reader +2 more Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to... 7.8 High
- adobe acrobat, acrobat and reader, acrobat reader +2 more Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact... 8.8 High
- microsoft office, word, works suite +2 more Buffer overflow in Microsoft Word in Office 2000 SP3, Office XP SP3, Office 2003 Sp1 and SP2, and... 8.8 High
- atlassian confluence server, confluence data center, confluence server/data center +2 more In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists... 9.8 Critical
- oracle solaris, oracle corporation solaris operating system +1 more Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The... 8.8 High
- Show olderLoading…