Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- d-link and trendnet multiple devices, dlink dir-626l firmware, dir-636l firmware +13 more +15 more The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary... 9.8 Critical
- apache tomcat, netapp 7-mode transition tool, oncommand balance +19 more +21 more When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server 8.1 High
- citrix netscaler sd-wan, netscaler sd-wan enterprise, cloudbridge virtual wan, and xenmobile server +1 more Citrix NetScaler SD-WAN devices through v9.1.2.26.561201 allow remote attackers to execute... 9.8 Critical
- netgear wireless access point (wap) devices, wn604 firmware, wn802tv2 firmware +5 more +7 more (1) boardData102.php, (2) boardData103.php, (3) boardDataJP.php, (4) boardDataNA.php, and (5)... 9.8 Critical
- cisco ios, ios xe, ios and ios xe +2 more A vulnerability in the Cisco Cluster Management Protocol (CMP) processing code in Cisco IOS and... 9.8 Critical
- microsoft windows, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- netgear dgn2200 devices, dgn2200 series firmware +1 more dnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote... 8.8 High
- netgear wnr2000v5 router, d6100 firmware, d7000 firmware +26 more +28 more The NETGEAR WNR2000v5 router contains a buffer overflow in the hidden_lang_avi parameter when... 9.8 Critical
- adobe flash player, flash player desktop runtime +1 more Adobe Flash Player versions 23.0.0.207 and earlier, 11.2.202.644 and earlier have an exploitable... 8.8 High
- adobe flash player, opensuse, redhat enterprise linux desktop +4 more +6 more Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to... 9.8 Critical
- rails ruby on rails, rubyonrails rails, debian linux +4 more +6 more Directory traversal vulnerability in Action View in Ruby on Rails 7.5 High
- arcserve udp, unified data protection (udp) +1 more Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to... 9.1 Critical
- tp-link archer c5 firmware, archer c7 firmware, archer c8 firmware +9 more +11 more Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0... 7.5 High
- cisco prime data center network manager (dcnm), prime data center network manager +1 more Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network... 7.8 High
- elastic elasticsearch, redhat fuse +1 more Improper Access Control in Elasticsearch 9.8 Critical
- microsoft kerberos key distribution center (kdc), windows 7, windows 8 +4 more +6 more The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista... 9.0 High
- microsoft windows, windows 7, windows 8 +7 more +9 more OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008... 9.3 High
- rejetto http file server, http file server (hfs) +1 more The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or... 9.8 Critical
- elastic elasticsearch Elasticsearch Improper Access Control vulnerability 8.1 High
- rails ruby on rails, rubyonrails rails, redhat enterprise linux server +1 more +3 more actionpack Path Traversal vulnerability 7.5 High
- d-link dsl-2760u, dlink dsl-2760u firmware +1 more Multiple cross-site scripting (XSS) vulnerabilities in D-Link DSL-2760U Gateway (Rev. E1) allow... 5.4 Medium
- hp application lifecycle management, procurve manager, hewlett packard (hp) procurve manager (pcm), pcm+, identity driven manager (idm), and application lifecycle management +2 more HP ProCurve Manager (PCM) 3.20 and 4.0, PCM+ 3.20 and 4.0, Identity Driven Manager (IDM) 4.0, and... 9.8 Critical
- apache struts, archiva, fujitsu interstage business process manager analytics +1 more +3 more Code injection in Apache Struts 9.8 Critical
- php, apple mac os x, debian linux +14 more +16 more sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script ... 7.5 High
- exim, canonical ubuntu linux, debian linux +1 more +3 more Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim... 7.8 High
- exim, canonical ubuntu linux, debian linux +1 more +3 more Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows... 9.8 Critical
- cisco ios xr Cisco IOS XR 3.4.0 through 3.9.1, when BGP is enabled, does not properly handle unrecognized... 7.5 High
- adobe coldfusion Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0... 9.8 Critical
- cisco ios xr Cisco IOS XR 3.4.0 through 3.8.1 allows remote attackers to cause a denial of service (session... 4.3 Medium
- phpmyadmin, debian linux +1 more Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x... 9.8 Critical
- adobe acrobat reader, reader and acrobat +1 more Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and... 8.8 High
- hewlett packard (hp) openview network node manager HP OpenView Network Node Manager 6.2 through 7.50 allows remote attackers to execute arbitrary... 9.8 Critical
- sonicwall sonicos, sonicosv +1 more A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service ... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +18 more +20 more An elevation of privilege vulnerability exists when the Windows Universal Plug and Play (UPnP)... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +9 more +11 more An elevation of privilege vulnerability exists when Windows improperly handles authentication... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +16 more +18 more An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 more An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly... 7.8 High
- microsoft win32k, windows, windows server +2 more +4 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +11 more +13 more An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)... 7.8 High
- microsoft task scheduler, windows 10 version 1507, windows 10 version 1607 +24 more +26 more Task Scheduler Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1703 +22 more +24 more Windows Elevation of Privilege Vulnerability 7.8 High
- microsoft windows, windows server, windows 10 1703 +5 more +7 more An elevation of privilege vulnerability exists when Windows AppX Deployment Service (AppXSVC)... 7.8 High
- microsoft windows, windows 7, windows 8.1 +13 more +15 more An elevation of privilege vulnerability exists when Windows improperly handles authentication... 7.8 High
- microsoft win32k, windows 7, windows server 2008 +1 more +3 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.0 High
- microsoft windows, windows 7, windows server 2008 +1 more +3 more The kernel-mode drivers in Transaction Manager in Microsoft Windows Vista SP2; Windows Server... 7.8 High
- microsoft windows, windows 7, windows 8.1 +7 more +9 more The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;... 7.8 High
- microsoft win32k, windows 7, windows 8 +7 more +9 more The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,... 6.9 Medium
- mozilla firefox, firefox esr, firefox for android +4 more +6 more An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable... 9.6 Critical
- mozilla firefox, firefox esr, firefox for android +4 more +6 more Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We... 8.8 High
- vmware cloud foundation, vcenter server, vcenter server and cloud foundation +2 more The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to... 5.3 Medium
- Show olderLoading…