Known exploited vulnerabilities
Reported exploited by CISA or ENISA EUVD.
- oracle virtualbox The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the... 8.8 High
- microsoft windows, windows 2000, windows nt +1 more +3 more The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute... 7.8 High
- microsoft windows, windows 2000, windows nt +2 more smss.exe debugging subsystem in Windows NT and Windows 2000 does not properly authenticate... 7.8 High
- synacor zimbra collaboration suite, zimbra collaborate suite (zcs) +1 more An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15... 6.1 Medium
- microsoft office, microsoft corporation office 2007 sp3, microsoft office 2010 sp2, microsoft office 2013 sp1, and microsoft office 2016. +1 more Microsoft Office allows a remote code execution vulnerability due to the way that it handles... 7.8 High
- microsoft internet explorer A remote code execution vulnerability exists when Internet Explorer improperly accesses objects... 8.8 High
- microsoft windows, windows 7, windows 8 +6 more +8 more Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8,... 7.8 High
- dependencytrack frontend, zabbix, debian linux +1 more +3 more Possible view of the setup pages by unauthenticated users if config file already exists 3.7 Low
- dependencytrack frontend, zabbix +1 more Unsafe client-side session storage leading to authentication bypass/instance takeover via Zabbix Frontend with configured SAML 9.1 Critical
- google chrome, chromium animation +1 more Use after free in Animation 8.8 High
- adobe commerce, commerce and magento open source, magento +1 more +3 more Adobe Commerce checkout improper input validation leads to remote code execution 9.8 Critical
- microsoft internet explorer, internet explorer 10, internet explorer 11 +2 more A remote code execution vulnerability exists in the way that the scripting engine handles objects... 7.5 High
- check point software technologies ltd. winrar In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when... 7.8 High
- adobe flash player, flash player installer, redhat enterprise linux desktop +2 more +4 more Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free... 7.8 High
- microsoft windows, windows 10, windows 10 servers +12 more +14 more A remote code execution vulnerability exists in the way that the VBScript engine handles objects... 7.5 High
- phpunit, oracle communications diameter signaling router +1 more Code Injection in PHPUnit 9.8 Critical
- microsoft office, office compatibility pack, office web apps +4 more +6 more Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office... 9.3 High
- microsoft lync, office, office compatibility pack +6 more +8 more GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1... 7.8 High
- apple ipados, macos, safari +3 more +5 more A use after free issue was addressed with improved memory management. This issue is fixed in... 8.8 High
- microsoft windows, windows 10 version 1809, windows 10 version 1909 +8 more +10 more Windows Elevation of Privilege Vulnerability 7.8 High
- microsoft smbv3, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +10 more +12 more A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 3... 10.0 Critical
- jenkins, jenkins stapler web framework, redhat openshift container platform +2 more Deserialization of Untrusted Data in Jenkins 9.8 Critical
- oracle weblogic server Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... 7.5 High
- apache struts, struts 1 +1 more Code execution in Apache Struts 1 plugin 9.8 Critical
- microsoft windows, windows 7, windows 8.1 +8 more +10 more Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows... 8.8 High
- microsoft win32k, windows 7, windows 8.1 +9 more +11 more The kernel-mode drivers in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8... 7.8 High
- microsoft office Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016 allow a remote code execution... 7.8 High
- microsoft smbv1, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- microsoft smbv1, microsoft corporation windows smb, microsoft server message block +8 more +10 more The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7... 8.8 High
- apache activemq Improper Input Validation in Apache ActiveMQ 9.8 Critical
- microsoft http.sys, windows 7, windows 8 +3 more +5 more HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and... 10.0 High
- apple os x, mac os x +1 more The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to... 7.8 High
- dlink dir-645, d-link dir-645 router, dlink dir-645 firmware +2 more The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote... 8.8 High
- apple iphone os, mac os x, os x +1 more +3 more Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows... 7.8 High
- microsoft win32k, windows 10 version 1809, windows 10 version 1909 +15 more +17 more Win32k Elevation of Privilege Vulnerability 7.0 High
- apple ipados, macos, ios and ipados +2 more +4 more A memory corruption issue was addressed with improved input validation. This issue is fixed in... 9.8 Critical
- sonicwall sma100, sma 100 appliances, sma 200 firmware +4 more +6 more A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module... 9.8 Critical
- grandstream ucm6200, ucm6200 firmware +1 more The HTTP interface of the Grandstream UCM6200 series is vulnerable to an unauthenticated remote... 9.8 Critical
- microsoft windows, windows 10 version 1903 for 32-bit systems, windows 10 version 1903 for arm64-based systems +24 more +26 more An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer... 7.8 High
- hpe proliant ml10 gen9 server firmware, intel active management technology (amt), small business technology (sbt), and standard manageability, active management technology firmware +35 more +37 more An unprivileged network attacker could gain system privileges to provisioned Intel manageability... 9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function... 9.8 Critical
- gnu bash, apple mac os x, arista eos +71 more +73 more GNU Bash through 4.3 processes trailing strings after function definitions in the values of... 9.8 Critical
- microsoft internet explorer Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers... 10.0 High
- solarwinds serv-u Improper Input Validation Vulnerability in Serv-U 4.3 Medium
- microsoft win32k, windows 10, windows 10 servers +17 more +19 more An elevation of privilege vulnerability exists in Windows when the Win32k component fails to... 7.8 High
- apache struts, struts 2 +1 more Apache Struts Remote Java Code Execution 9.8 Critical
- apache struts, struts 1 +1 more Improper Input Validation in Apache Struts 7.5 High
- aviatrix controller An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a... 9.8 Critical
- october cms cms, octobercms october +1 more Account Takeover in Octobercms 8.2 High
- microsoft exchange server, exchange server 2013 cumulative update 23, exchange server 2016 cumulative update 19 +3 more +5 more Microsoft Exchange Server Information Disclosure Vulnerability 7.3 High
- Show olderLoading…