Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- cisco adaptive security appliance (asa), adaptive security appliance software +1 more Cisco Adaptive Security Appliance (ASA) Software before 8.4(1) on ASA 5500, ASA 5500-X, PIX, and... 7.8 High
- cisco adaptive security appliance (asa), adaptive security appliance software, asa 1000v cloud firewall software +1 more +3 more Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500,... 8.8 High
- microsoft internet explorer Microsoft Internet Explorer 9 through 11 allows remote attackers to determine the existence of... 4.3 Medium
- cisco ios xr software, ios xr +1 more Cisco IOS XR Software Health Check Open Port Vulnerability 6.5 Medium
- android kernel, google android +1 more In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use... 7.8 High
- android kernel, google android, debian linux +2 more In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition.... 6.4 Medium
- apple ipados, macos, multiple products +4 more +6 more Apple Multiple Products Memory Corruption Vulnerability 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects... 7.8 High
- facebook whatsapp desktop, meta platforms whatsapp +1 more A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for... 8.2 High
- microsoft update notification manager, windows, windows 10 version 1903 for 32-bit systems +17 more +19 more An elevation of privilege vulnerability exists in the way the Update Notification Manager handles... 7.8 High
- apple ios, macos, iphone os +2 more +4 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... 7.8 High
- apple ios, iphone os +1 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 more An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions... 7.8 High
- google chrome, chrome webaudio, opensuse leap +2 more Use after free in WebAudio in Google Chrome prior to 78.0.3904.87 allowed a remote attacker to... 8.8 High
- redhat codeready linux builder, codeready linux builder eus, codeready linux builder for arm64 eus +20 more +22 more A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted... 8.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +17 more +19 more An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +16 more +18 more A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls,... 7.8 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 more Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and... 10.0 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 more A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in... 8.8 High
- microsoft windows, windows server, windows 10 1507 +14 more +16 more An information disclosure vulnerability exists in the way that the Windows SMB Server handles... 6.5 Medium
- google chrome, chrome blink +1 more Use-After-Free in puppeteer 6.5 Medium
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 more An information disclosure vulnerability exists when Internet Explorer improperly handles objects... 6.5 Medium
- microsoft win32k, windows 7, windows server 2008 +1 more +3 more An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k... 7.8 High
- adobe flash player, flash player desktop runtime, redhat enterprise linux desktop +2 more +4 more Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow... 7.8 High
- zyxel atp series firmware, usg flex 100(w) firmware, usg flex 200 firmware +19 more +21 more A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware... 9.8 Critical
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 more Spring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecured 10.0 Critical
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +9 more +11 more On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x... 9.8 Critical
- apple ipados, macos, tvos +7 more +9 more A type confusion issue was addressed with improved state handling. This issue is fixed in macOS... 8.8 High
- apple icloud, icloud for windows, ios +10 more +12 more A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12... 8.8 High
- microsoft win32k, windows 7, windows 8 +7 more +9 more win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2,... 7.2 High
- openssl, broadcom symantec messaging gateway, canonical ubuntu linux +25 more +27 more The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle... 7.5 High
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to... 8.8 High
- wso2 api manager, enterprise integrator, identity server +6 more +8 more Certain WSO2 products allow unrestricted file upload with resultant remote code execution. This... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows User Profile Service Elevation of Privilege Vulnerability 7.0 High
- linux kernel, fedoraproject fedora, netapp h300e firmware +26 more +28 more Important: kernel security, bug fix, and enhancement update 7.8 High
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows User Profile Service Elevation of Privilege Vulnerability 7.0 High
- microsoft win32k, windows 10 version 2004, windows 10 version 20h2 +11 more +13 more Win32k Elevation of Privilege Vulnerability 7.8 High
- microsoft win32k, windows 10 version 1809, windows 10 version 1909 +17 more +19 more Win32k Elevation of Privilege Vulnerability 7.8 High
- jenkins script security plugin, script security, redhat openshift container platform +2 more Sandbox bypass in Script Security Plugin 9.9 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- facebook whatsapp business for android, whatsapp business for ios, whatsapp for android +5 more +7 more A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code execution via... 9.8 Critical
- synacor zimbra collaboration suite (zcs), zimbra collaboration suite +1 more Cross-site scripting (XSS) vulnerability in the ZmMailMsgView.getAttachmentLinkHtml function in... 6.1 Medium
- google chrome, chromium v8 +1 more Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker... 8.8 High
- vmware identity manager, vrealize automation, workspace one access +3 more +5 more VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege... 7.8 High
- d-link dns-320 storage device, dlink dns-320 firmware +1 more The login_mgr.cgi script in D-Link DNS-320 through 2.05.B10 is vulnerable to remote command... 9.8 Critical
- ubiquiti airos On certain Ubiquiti devices, Command Injection exists via a GET request to stainfo.cgi (aka Show... 9.8 Critical
- schneider electric u.motion builder, u.motion builder software version 1.3.4 +1 more A SQL Injection (CWE-89) vulnerability exists in U.motion Builder software version 1.3.4 which... 9.8 Critical
- barco wepresent wipg-1000p firmware, crestron am-100 firmware, am-101 firmware +11 more +13 more The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG... 9.8 Critical
- trihedral vtscada, vtscada (formerly vts) +1 more The WAP interface in Trihedral VTScada (formerly VTS) 8.x through 11.x before 11.2.02 allows... 7.5 High
- indusoft web studio InduSoft Web Studio Path Traversal 7.5
- Show olderLoading…