Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- al-enterprise omnipcx enterprise communication server, alcatel omnipcx enterprise +1 more masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1... 9.8 Critical
- vmware identity manager, workspace one access and identity manager, workspace one access +3 more +5 more VMware Workspace ONE Access and Identity Manager contain a remote code execution vulnerability... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Common Log File System Driver Elevation of Privilege Vulnerability 7.8 High
- kaseya virtual system/server administrator (vsa), virtual system administrator +1 more Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows... 9.8 Critical
- drupal core, drupal, debian linux +2 more Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004 9.8 Critical
- microsoft internet explorer Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or... 8.8 High
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 more Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation... 9.8 Critical
- adobe flash player, flash player desktop runtime, opensuse evergreen +6 more +8 more Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)... 9.8 Critical
- adobe flash player, hp insight orchestration, system management homepage +12 more +14 more Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before... 9.8 Critical
- adobe flash player, microsoft edge, internet explorer +4 more +6 more Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before... 9.8 Critical
- adobe flash player, microsoft edge, internet explorer +2 more +4 more Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x... 9.8 Critical
- adobe flash player Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0... 10.0 High
- google android, pixel +1 more In kbase_jd_user_buf_pin_pages of mali_kbase_mem.c, there is a possible out of bounds write due... 7.8 High
- watchguard firebox and xtm, fireware +1 more WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to... 8.8 High
- linux kernel, debian linux, netapp 8300 firmware +8 more +10 more Double Free in net/packet/af_packet.c leading to priviledge escalation 6.6 Medium
- microsoft active directory, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 more Active Directory Domain Services Elevation of Privilege Vulnerability 7.5 High
- microsoft active directory, windows server 2008 r2 service pack 1, windows server 2008 r2 service pack 1 (server core installation) +16 more +18 more Active Directory Domain Services Elevation of Privilege Vulnerability 7.5 High
- checkbox survey Deserialization of Untrusted Data vulnerability in CheckboxWeb.dll of Checkbox Survey allows an... 9.8 Critical
- qnap qts, quts hero, network-attached storage (nas) +2 more Command Injection Vulnerability in QTS and QuTS hero 9.8 Critical
- telerik ui for asp.net ajax, user interface (ui) for asp.net ajax +1 more Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2... 9.8 Critical
- microsoft http protocol stack, windows 10 version 2004, windows 10 version 20h2 +6 more +8 more HTTP Protocol Stack Remote Code Execution Vulnerability 9.8 Critical
- sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 more Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... 7.8 High
- microsoft smbv1 server, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.1 High
- apple ipados, macos, tvos +3 more +5 more An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in... 7.8 High
- apple macos, mac os x +1 more An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was... 5.5 Medium
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework 9.8 Critical
- d-link multiple routers, dlink dir-810l firmware, dir-820l firmware +4 more +6 more A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L... 9.8 Critical
- trend micro apex central, trend micro, inc. micro apex central, trendmicro apex one +2 more An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated... 9.8 Critical
- sophos firewall, sfos +1 more An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Windows User Profile Service Elevation of Privilege Vulnerability 7.8 High
- qnap hybrid backup sync, qnap systems inc. hbs 1.3, hbs 2 +2 more +4 more Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync) 10.0 Critical
- dell dbutil, dbutil driver +1 more Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead... 8.8 High
- dasan gigabit passive optical network (gpon) routers, dasannetworks gpon router firmware +1 more An issue was discovered on Dasan GPON home routers. Command Injection can occur via the dest_host... 9.8 Critical
- dasan gigabit passive optical network (gpon) routers, dasannetworks gpon router firmware +1 more An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication... 9.8 Critical
- google chrome, chromium v8 +1 more chromium - security update 8.8 High
- debian redis, redis debian-specific redis servers +1 more It was discovered, that redis, a persistent key-value database, due to a packaging issue, is... 10.0 Critical
- microsoft office, 365 apps, 365 apps for enterprise +3 more +5 more Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability 7.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +14 more +16 more Windows Event Tracing Elevation of Privilege Vulnerability 7.8 High
- sonicwall secure remote access (sra), sma 210 firmware, sma 410 firmware +5 more +7 more ** UNSUPPORTED WHEN ASSIGNED ** Improper neutralization of a SQL Command leading to SQL Injection... 9.8 Critical
- atlassian confluence server, confluence data center +1 more Affected versions of Atlassian Confluence Server allow remote attackers to view restricted... 5.3 Medium
- sonicwall sma100, sma 100 firmware +1 more In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the... 7.5 High
- microsoft windows, windows 10, windows 10 servers +12 more +14 more An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced... 7.8 High
- microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +8 more +10 more An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver... 7.8 High
- microsoft directx graphics kernel (dxgkrnl), windows 10, windows 10 servers +12 more +14 more An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver... 7.8 High
- microsoft windows, windows 7, windows 8.1 +9 more +11 more Windows COM Aggregate Marshaler in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,... 7.3 High
- microsoft internet explorer Microsoft Internet Explorer 9 through 11 allow remote attackers to obtain sensitive information... 4.3 Medium
- microsoft edge, internet explorer, edge and internet explorer +1 more +3 more Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the... 8.1 High
- microsoft edge ChakraCore RCE Vulnerability 8.8 High
- microsoft edge ChakraCore RCE Vulnerability 8.8 High
- microsoft internet explorer, jscript, vbscript +2 more The Microsoft (1) JScript 5.8 and (2) VBScript 5.7 and 5.8 engines, as used in Internet Explorer... 7.5 High
- Show olderLoading…