Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- microsoft client-server run-time subsystem (csrss), windows 8.1, windows rt 8.1 +3 more +5 more The Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold... 7.8 High
- microsoft windows, windows 7, windows server 2008 +1 more +3 more The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1... 7.8 High
- microsoft windows, windows 7, windows 8 +7 more +9 more Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows... 9.3 High
- microsoft internet explorer JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary... 8.8 High
- microsoft office Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a... 8.8 High
- mozilla firefox, thunderbird, thunderbird esr +13 more +15 more Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and... 8.8 High
- oracle java se, jre, suse linux enterprise desktop +3 more +5 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- microsoft win32k, windows 7, windows 8 +6 more +8 more The EPATHOBJ::pprFlattenRec function in win32k.sys in the kernel-mode drivers in Microsoft... 7.8 High
- adobe acrobat, reader and acrobat, acrobat reader +6 more +8 more Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x... 9.8 Critical
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers... 8.8 High
- microsoft office compatibility pack, office web apps, word +2 more +4 more Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack... 9.3 High
- oracle fusion middleware Unspecified vulnerability in the Oracle Application Server Single Sign-On component in Oracle... 4.7 Medium
- oracle java se, jre, suse linux enterprise desktop +2 more Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7... 10.0 High
- adobe air, flash player, opensuse +6 more +8 more Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X;... 7.5 High
- microsoft windows xp, ancillary function driver (afd.sys), windows server 2003 +2 more afd.sys in the Ancillary Function Driver in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2... 7.8 High
- microsoft windows, windows 7, windows server 2003 +3 more +5 more Stack-based buffer overflow in the RtlQueryRegistryValues function in win32k.sys in Microsoft... 7.8 High
- mitel micollab, mivoice business express, micollab, mivoice business express +2 more The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business... 9.8 Critical
- watchguard firebox and xtm appliances, fireware +1 more On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka... 9.8 Critical
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +35 more +37 more Windows Print Spooler Elevation of Privilege Vulnerability 7.8 High
- sitecore xp, experience platform +1 more Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure... 9.8 Critical
- citrix sharefile storage zones controller, sharefile, sharefile storagezones controller +2 more Improper Access Control in Citrix ShareFile storage zones controller before 5.11.20 may allow an... 9.8 Critical
- gfi software helpdesk improper access control vulnerability in Helpdesk 7.3 High
- sophos sg utm, unified threat management +1 more A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM before v9.705 MR5,... 9.8 Critical
- d-link dir-610 devices, dlink dir-610 firmware +1 more ** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-610 devices allow Remote Command Execution via the cmd... 8.8 High
- palo alto networks pan-os PAN-OS: Authentication Bypass in SAML Authentication 10.0 Critical
- spring cloud config, vmware spring cloud config, vmware tanzu spring cloud configuration (config) server +2 more Directory Traversal with spring-cloud-config-server 7.5 High
- apache kylin Command Injection in Kylin 8.8 High
- juniper junos, junos os +1 more Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services 8.8 High
- d-link dcs-930l devices, dlink dcs-930l firmware +1 more setSystemCommand on D-Link DCS-930L devices before 2.12 allows a remote attacker to execute code... 7.2 High
- zyxel nas326, nas520, nas540 +38 more +40 more ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi 9.8 Critical
- openbsd opensmtpd, canonical ubuntu linux, debian linux +1 more +3 more smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products,... 9.8 Critical
- php, canonical ubuntu linux, debian linux +21 more +23 more Underflow in PHP-FPM can lead to RCE 8.7 High
- d-link multiple routers, dlink dap-1533 firmware, dhp-1565 firmware +8 more +10 more Unauthenticated remote code execution occurs in D-Link products such as DIR-655C, DIR-866L, DIR... 9.8 Critical
- webmin An issue was discovered in Webmin through 1.920. The parameter old in password_change.cgi... 9.8 Critical
- citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection. 9.8 Critical
- citrix netscaler sd-wan, sd-wan, sd-wan and netscaler +2 more Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input... 8.8 High
- microsoft graphics device interface (gdi), windows, windows 10 version 1903 for 32-bit systems +20 more +22 more A remote code execution vulnerability exists in the way that the Windows Graphics Device... 8.8 High
- lg n1a1 nas, n1a1 firmware +1 more LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary... 9.8 Critical
- oracle bi publisher (formerly xml publisher), business intelligence publisher +1 more Vulnerability in the BI Publisher (formerly XML Publisher) component of Oracle Fusion Middleware ... 7.2 High
- kentico xperience An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10... 9.8 Critical
- jenkins project pipeline: groovy plugin, jenkins matrix project plugin, pipeline\ +1 more +3 more Sandbox bypass in Jenkins Pipeline: Groovy Plugin 9.9 Critical
- drupal core, drupal +1 more Drupal core - Highly critical - Remote Code Execution 8.1 High
- microsoft windows, windows 10, windows 10 servers +5 more +7 more A remote code execution vulnerability exists when the Windows Shell does not properly validate... 8.8 High
- microsoft internet explorer 10, internet explorer 11, internet explorer 9 +2 more +4 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- vmware sd-wan edge, nsx sd-wan by velocloud +1 more VMware NSX SD-WAN Edge by VeloCloud prior to version 3.1.0 contains a command injection... 8.1 High
- quest kace system management appliance The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8... 9.8 Critical
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 more Spring Data Commons remote code injection vulnerability 9.8 Critical
- cisco secure access control system (acs), secure access control system +1 more A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to... 9.8 Critical
- cisco vpn routers, rv132w firmware, rv134w firmware +2 more A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2... 9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 more Unrestricted Upload of File with Dangerous Type Apache Tomcat 8.1 High
- Show olderLoading…